Disable SSPR by group (exclude group from SSPR)
Currently, you can configure SSPR to be enabled for your entire organization or for a specific group. It would be nice to have the ability to disable/exclude a specific group (e.g. enable for the entire organization except for a specific group(s)). The use case would be a scenario where almost the entire company should have SSPR but there are sensitive accounts that should not be enabled for it.
Thank your for your feedback! We are considering this capability and will keep you up-to-date on our decision.
David S. commented
Any update on this? we are trying to exclude certain groups from SSPR
Richard Cornell commented
I also want to exclude service accounts from SSPR. It would be good if this worked like conditional access where there was an exclude option.
Dennis Egthuijsen | Dynamic People commented
would be great to have an update, i want to exclude service accounts from Sspr.
Juan Carlos Vega (CModerna) commented
Esa opcion esta necesario ya que en el caso donde las políticas internas de nuestra organización no permiten integrar datos personales para el restablecimiento de contraseñas (correo y celular), con esto podemos caer en contradicción e incluso demandas legales.
Can the Azure team provide an update on this. It is a feature that is needed for various reasons, one being new user account provisioning.
Its been 2 years since the initial request. A response would be appreciated.
+1 for this. We need it for specific general accounts that are denied logon from outside our building through conditional access so MFA is not needed, required and SSPR should not be in effect. Maintaining an include group is much more labour intensive than maintaining an exclude group.
We are running into this as being a pain point with Microsoft Voice common area phones. Don't really want to setup SSPR on that account, but it's the only accounts we don't want it on. So we have use a group to enable when it should be ALL but this gorup.
Hiren Shah commented
also allow selection of multiple group to enable SSPR.
This is someting that should be available. The ability to exclude users/groups would be very useful.
Need this feature
Daniel Rockwell commented
Agreed! This feature would be very helpful.
Peter Lovering commented
I could use this feature right now. Too bad.
Luis Barrera commented
This is a definitely great feature to be added for SSPR.