Microsoft Entra ID Capabilities

Identity types, authentication methods (MFA, passwordless, SSPR), and access management with Conditional Access and RBAC.

Microsoft Entra ID (formerly Azure AD) is Microsoft’s cloud identity service. Identity types include users (member and guest/B2B), service principals and managed identities (for applications), and devices.

Authentication methods strengthen sign-in: MFA (something you know/have/are), passwordless options (Windows Hello, FIDO2 security keys, the Microsoft Authenticator app), and self-service password reset (SSPR). Microsoft Entra Password Protection blocks weak and banned passwords.

Which is a passwordless authentication method in Microsoft Entra ID?

What does self-service password reset (SSPR) allow?