Authentication method usable only for SSPR; answering several questions still counts as a single method. Administrators are barred from it, and it is due to be retired in March 2027.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Security questions in context, with comparison tables and the common traps.
Terms in this definition
- Authentication
Checking an identity claim made by a person, device or app, for instance by asking for a password plus an extra factor. Authorisation only happens once this step has succeeded.
- SSPR
Allows users to unlock or reset their own passwords with methods they have registered. It can apply to All users, None, or Selected (a single group, with nesting supported).
Related terms
- Two-gate policy
The built-in self-service password reset policy for anyone holding a Microsoft Entra admin role, which cannot be changed. It requires two verification methods and does not permit security questions.