Starting September 7, 2026, Microsoft Entra ID SSPR will require users to have explicitly registered authentication methods for password reset verification, disallowing directory-sourced contact info unless registered. A registration campaign begins August 6, 2026, urging users to register methods to avoid reset failures.
Applies to: Microsoft Entra
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).