By enabling a self-service password for your users, they are able to change their passwords automatically, without calling the help desk. This eliminates management overhead significantly.

A self-service password reset can easily be enabled from the Azure portal. To do so, follow these steps:

1. Navigate to the Azure portal by going to https://portal.azure.com.
2. From the left menu, select Azure Active Directory.
3. In the Azure AD Overview blade, in the left menu, under Manage, select Password reset.

4. In the password reset Overview blade, you can enable self-service password resets for all your users by selecting All or for selected users and groups by selecting Selected. For demonstration purposes, enable it for all users and click Save, as follows:

5. Next, we need to set the different required authentication methods for your users. For this, under Manage, select Authentication methods.
6. In the next blade, we can set the number of authentication methods that are required to reset a password and what methods there are available for your users, as follows:

7. Make a selection and click Save.
   

Now, we have configured a self-service password reset for all our users inside our Azure AD tenant. In the next section, we are going to cover conditional access policies in Azure AD.