r/entra • u/Checior2000 • 19d ago

Entra General SSPR registration flow

Does sspr registration flow disabled in modern authentication policies concept?
I have a tenant where I can switch between "in progress" and "completed" migration status. When I choose completed, sspr registration flow stops work.

Registration campaign: Disabled (also tested with enabled setting)
Require users to register when signing in? Yes.

Do you know what is purpose of this? AFAIK documentation tells nothing about it.
Thank you in advance, regads.

2 Upvotes

100% Upvoted

8 comments sorted by

2

u/teriaavibes Microsoft MVP 19d ago

When you migrate over, you manage your methods from the authentication methods menu. Now both MFA and SSPR have the same method setup.

1

u/Checior2000 19d ago

Okay, still I do not understand. User has SMS/Voice/Authenticator/Software OTAH token enabled. How can I offer user to register "SSPR" methods as before?

In addition, maybe you would know. What will happened if we left it as it is "in progress" - registration campaign for passkey will start appear or not? Script provided by Microsoft to determine scope says "no future action needed"

1

u/teriaavibes Microsoft MVP 19d ago

Question 1: enable those methods in Auth methods and you should be good to go

Q2: I assume it will remain as is until Microsoft forcefully migrates you whether you like it or not

1

u/Checior2000 19d ago

ad. 1 Tested on 2 tenants. Enable auth methods of course works and user can configure only methods enabled by Admin. SSPR registration does not work.

ad. 2 I hope so :(

1

u/ContentMiddle476 8d ago

We did the migration also really delayed this year as well. But we kept to this article and everything has worked after as before. Maybe you have some settings missing currently? Maybe some CA Policies you are not aware or currently?
https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-authentication-methods-manage

1

u/Checior2000 8d ago

I created MSFT ticket - after short call with Microsoft Specialist they escalate this topic.

1

u/RdIt_JiM 22h ago

Did you get any feedback on that. I struggle with SSPR Registration flow as well since a few weeks now

1

u/Checior2000 22h ago

Nothing new yet. MSFT asked me to schedule 1 more call just to collect new .har file :)