Combined security information registration
Message Center notices cited
Entra · Official Microsoft guidance
Observed content change
Read to decideNew content in “Change a password in My Sign-Ins”; read it to see whether it concerns you.
Changed article references · 1 added · 0 removed
- Added link: Allow password change after secure sign-in.
https://review.learn.microsoft.com/en-us/entra/identity/authentication/concept-sspr-howitworks?branch=pr-en-us-14357&tabs=secure-sign-in#tab/secure-sign-in
A user navigates to Security info. After signing in, the user can change their password. If the user authenticates with a password and a multifactor authentication method,[removed: they're able to use the enhanced user experience to][added: they can] change their password without entering[removed: their existing password. When finished, the user has the new password updated on the Security info page. Authentication methods such as Temporary Access Pass (TAP) aren't supported for password change unless the user knows]their existing password.
Before: A user navigates to Security info. After signing in, the user can change their password. If the user authenticates with a password and a multifactor authentication method, they're able to use the enhanced user experience to change their password without entering their existing password. When finished, the user has the new password updated on the Security info page. Authentication methods such as Temporary Access Pass (TAP) aren't supported for password change unless the user knows their existing password.
After: A user navigates to Security info. After signing in, the user can change their password. If the user authenticates with a password and a multifactor authentication method, they can change their password without entering their existing password.
[added: An organization can also allow users to change their cloud password after they sign in with Microsoft Entra certificate-based authentication (CBA), a passkey (FIDO2), or a Microsoft Authenticator passwordless phone sign-in notification. Users don't need to know or enter their current password, and they don't need to be registered for SSPR. For administrator configuration, user steps, and limitations, see Allow password change after secure sign-in.]
Before: No saved wording on this side.
After: An organization can also allow users to change their cloud password after they sign in with Microsoft Entra certificate-based authentication (CBA), a passkey (FIDO2), or a Microsoft Authenticator passwordless phone sign-in notification. Users don't need to know or enter their current password, and they don't need to be registered for SSPR. For administrator configuration, user steps, and limitations, see Allow password change after secure sign-in.
[added: Authentication methods such as Temporary Access Pass (TAP) aren't supported for password change unless the user knows their existing password.]
Before: No saved wording on this side.
After: Authentication methods such as Temporary Access Pass (TAP) aren't supported for password change unless the user knows their existing password.
Source: Microsoft source · © Microsoft · MIT.
Read the current Microsoft source · Link to this observation · Compare any two versions
Other changed sections
Observation details
- Observed by ChangeIntel
- 30 Oct 01:49 UTC
- Source update metadata
- 29 Oct 22:32 UTC
- First observed on this installation
- 5 Oct 23:18 UTC
- Last successful check
- today 10:20 UTC
- Next check due
- today 16:20 UTC
Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment. Article references show literal targets and labels, including relative addresses; image bytes are not captured or compared.