[MUSIC]
Sadie Henry: Hi, folks. My name is Sadie Henry, and I’m a
Program Manager on the Azure Active Directory Identity
and Access Management team here at Microsoft.
Today, I’ll be showing you how to enable your users to
successfully register their security info so that they can
verify their identity when they’re signing in or resetting
their password.
Before we dive in, let’s talk about security info and why
it’s important.
Security info is a set of methods that your users can use
to verify their identity. These methods include the Microsoft
Authenticator app, their phone number, an alternate email
address, security questions, and more. To verify their
identity, your users can do things like approve a notification
to the Microsoft Authenticator app when they sign in or
reset their password. Getting your users registered is a vital
step in protecting your organization with multi-factor
authentication and self-service password reset.
So now that you know what security info is and why it’s
important, let’s talk about how users register their Security
Info. Previously, users had to register their security info
for multi-factor authentication and self-service in separate
experiences. But now, users can register for both multi-
factor authentication and self-service password reset in a
single streamlined experience.
This streamlined experience has two modes: a step by step
wizard mode and an add and manage mode. The first mode
is a step by step wizard that users are brought through
when they’re required to register their security info while
signing in to their Azure AD account.
This wizard requires users to register the minimum number
of methods needed to meet your organization’s multi-factor
authentication and self-service password reset policies if
both features are enabled. The methods shown to a user by
default are the most secure methods that are enabled for
your organization. However, if your policies allow some
flexibility in which methods the user can register, they’ll see
an option to set up a different method.
The second mode allows users to manage their security info
and add additional methods. Users can access their security
info from the My Profile page or by going directly to
aka.ms/mysecurityinfo. From here, users can view, change,
and delete previously registered methods. They can also add
a new method or change their default method.
Now, it’s time to enable your users to register their security
info. First, it’s important that you prepare your users to
register their security info. We recommend using
communication tools like email campaigns, training sessions,
stickers, table tents, and more to make sure that your users
are prepared to register their security information. You can
check out some example customizable templates at
aka.ms/ssprtemplates and aka.ms/mfatemplates. You can
also use our detailed end user documentation at
aka.ms/securityinfoguide.
If you’d like to learn more about multi-factor authentication,
self-service password reset and the streamlined security
info registration experience, check out these resources.
If you’re planning a multi-factor authentication or self-
service password reset deployment, we recommend that
you check out aka.ms/deploymentplans for detailed
guidance on how to deploy those features. We’d also love
to hear your feedback. If you have an idea or a change
you’d like to see, submit your idea to aka.ms/sspruservoice
and we’ll take a look.
That’s all for today. Thanks for watching.
[MUSIC]