Configuring MIM Service
SSPR is not enabled by default in MIM Service, so we need to enable some MPRs and configure some sets and workflows. The next section will outline what is needed to get this working.
Password Reset Users Set
The default MPRs around SSPR use a predefined set called Password Reset Users Set. If you look at the criterion for that set, you will find that it applies to all users:
Allowing SSPR for all users is usually more extreme than most organizations allow. In our situation, we will allow SSPR for all employees:
We have now defined ...
Get Microsoft Identity Manager 2016 Handbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.