Microsoft have announced an upcoming change for the security information registration experience.  

In April 2020, the combined security information registration experience for registering both multifactor authentication (MFA) and self-service password reset (SSPR) was released for end-users to opt in. Enabling users to register once and get the benefits of both MFA and SSPR—eliminating having to register their security info for these features twice. 

As of early October 2022, this will be set as a default for all tenants. 

TO PLAN FOR THIS CHANGE, AND ENSURE YOUR USERS ARE PREPARED FOR A SUCCESSFUL ROLLOUT YOU CAN BASE YOUR TRAINING ON: 

• Set up security information from a sign-in page blog
• Change your two step verification method and settings

If your organisation has not adopted the combined security information experience for end users in Azure Active Directory, you can enable it prior to September 30th. 

TO REVIEW YOUR ORGANISATION’S CURRENT SETTING AND ENABLE COMBINED REGISTRATION FOR ALL USERS, COMPLETE THESE STEPS: 

1. Sign into the Azure portal as a user administrator or global administrator. 
2. Go to Azure Active Directory > User settings > Manage user feature settings. 
3. Under Users can use the combined security information registration experience, choose to enable for All users. 

Whilst the impact of this change is relatively small it is important to ensure your identity platform configuration is appropriately maintained over time. Our Security Health Check — Rapid Circle would be able to provide advice around these configurations, and other baseline security recommendations for a tenant. 

To stay across all of the change in your M365 environment, consider our M365 Manage service to provide ongoing consulting and advisory services around these types of changes.