Entra ID Self-Service Password Reset & Authpoint

I'm wanting to enable Microsoft's SSPR with password write-back to our on-prem domain. I would like to be able to use more than an Email OTP as the second factor. Has anyone successfully used Authpoint either with a push notification, or use the TOTP code to accomplish this?

Comments

  • james.carsonjames.carson Moderator, WatchGuard Representative

    Hi @Garrett
    If Microsoft's system supports SAML 2.0 you should be able to do this without a problem. It would just require setting that as an option in that SAML resource inside of Authpoint

    I'm not aware of if they support this for that specific feature. Microsoft, for example, does not support this for on-premise OWA, so they may not support this either. I would suggest checking the docs for that feature to see if it supports SAML 2.0.

    -James Carson
    WatchGuard Customer Support

  • This makes sense. Since our domain is already federated with Authpoint, i was hoping that SSPR would leverage authpoint as the second factor.

Sign In to comment.