Shulou(Shulou.com)06/03 Report--

Azure configuration Management Series AD Sync (PART1)

Using local synchronization to write back passwords in Azure AD

Administrators have heard a lot of customer needs by resetting passwords in Azure AD, and customers want to enable end users to reset their passwords. To try, log in to the Windows Azure Administration Portal, click Active Directory in the left navigation bar, then go to the directory configuration tab, and look for the "user password reset Policy" section.

The user's self-service password reset is part of the latest set of changes included in Windows Azure Active Directory Premium. With this feature, users can reset their passwords using their mobile phone or office phone or alternate email address. Users can even register their own password reset data with just a few mouse clicks! In addition, as an administrator, you have complete control over the policies that these users apply when they reset their passwords.

Usually, we are often asked the following questions by our customers

How do I configure password resets from the Azure Administration Portal?

How do my users register for password reset?

How to reset the password after user registration?

How do I configure a password reset to write the password back to the local Active Directory?

How to configure password reset in the Azure Management Portal

To enable self-service password reset, you need to use Windows Azure Active Directory Premium. You can follow the instructions here to learn how to operate. When you are done, log in to the Windows Azure administration portal, navigate to your directory, click the configuration tab, and then scroll down until you see the user password reset Policy section (see figure 1).

Figure 1: directory configuration Tab

Figure 2: user password reset policy configuration section

After entering the configure tab, this is what you see in the "user password reset Policy" section (see figure 2). You can adjust many clever knobs to change the behavior of password resets in your organization. They are divided into several logical categories:

Security policy

Registration strategy

Portal customization strategy

Figure 3: password reset security policy

How to manage password reset Security Policy

The controls in this section (outlined in figure 3 above) affect how password resets work in your organization. Continue to read the following to understand the functionality of each control.

Is password reset enabled for my directory? After using Windows Azure Active Directory Premium, we will see a new configuration setting that enables password reset to be turned on or off for all users. In order to see the rest of the policy controls, you must first turn them on.

What types of contacts can users use to reset their passwords? When this feature is enabled, you can select the contact information that users can use to reset their password. For people with phone numbers, know that we support voice and SMS calls based on mobile phone contact information. All of our SMS and voice messages are also localized for users from different regions.

How many contact methods must the user provide when resetting the password? For those who have high security requirements, or who just want to slightly ensure that their passwords are safely reset, we allow users to use one or both of the contact information selected above.

Figure 4: password reset registration policy

How to manage your password reset registration policy

The controls in this section (outlined in figure 4 above) affect how and when users register for password resets. The following is a description of the function of each control.

Where do my users register their data? Is there no contact data defined for all users? No problem! We provide an end-user accessible portal where users can provide their contact information in a simple and secure manner. As we continue to enrich our services, we can ensure that we meet all the latest challenges and keep users up-to-date.

Do you require the user to register a password reset when logging in to the access panel? Do you want to register users in your organization to quickly and easily reset your password? You can configure password resets and access http://**apps.microsoft.com to collect user data.

How long must the user reconfirm the data? Do you want to keep your users' contact data up-to-date over time? You can choose to configure the time that must elapse after prompting the user to verify again after the first registration. If you set this time to 0 days, users will not be prompted to revalidate their data.

Figure 5: password reset Portal customization

Azure configuration Management Series AD Sync (PART1)

Azure configuration Management Series AD Sync (PART3)

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.