{"id":17404,"date":"2026-07-21T08:03:06","date_gmt":"2026-07-20T23:03:06","guid":{"rendered":"https:\/\/m365jp.net\/?p=17404"},"modified":"2026-07-21T08:06:40","modified_gmt":"2026-07-20T23:06:40","slug":"mc1400824-updated-microsoft-entra-self-service-password-reset-captcha-protection-updated","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2026-07-21-mc1400824-updated-microsoft-entra-self-service-password-reset-captcha-protection-updated","title":{"rendered":"MC1400824 | (Updated) Microsoft Entra: Self-service password reset CAPTCHA protection updated"},"content":{"rendered":"
\n
\n
\n\n\n\n
MC1400824 | (Updated) Microsoft Entra: Self-service password reset CAPTCHA protection updated<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\n\n\n\n\n\n\n\n
Classification<\/th>\nplanForChange<\/td>\n<\/tr>\n
Last Updated<\/th>\n07\/20\/2026 22:13:25<\/td>\n<\/tr>\n
Start Time<\/th>\n06\/22\/2026 15:17:47<\/td>\n<\/tr>\n
End Time<\/th>\n09\/28\/2026 07:00:00<\/td>\n<\/tr>\n
Message Content<\/th>\n\n

Updated July 20, 2026: We have updated the timeline. Thank you for your patience. <\/p>\n

[What and Why]<\/strong><\/p>\n

We are updating bot protection in Microsoft Entra self-service password reset (SSPR) by replacing the legacy CAPTCHA with modern backend throttling and behavior-based abuse detection. This change improves security, accessibility, and reliability by reducing friction for users while strengthening protection against automated attacks and account enumeration. No configuration changes are required. This change is fully managed by Microsoft.<\/p>\n

[Rollout Schedule]<\/strong><\/p>\n

General Availability (Worldwide): <\/strong>Rollout will begin in early August 2026<\/strong> (previously late July) and is expected to complete by late August 2026<\/strong> (previously mid-August).<\/p>\n

[Impact on Your Organization]<\/strong><\/p>\n

Who is affected<\/em><\/p>\n

    \n
  1. <\/span>All Microsoft Entra tenants using self-service password reset (SSPR)<\/li>\n<\/ol>\n

    Platforms\/Services<\/em><\/p>\n

      \n
    1. <\/span>Microsoft Entra, self-service password reset (web flow)<\/li>\n<\/ol>\n

      What will happen<\/em><\/p>\n

        \n
      1. <\/span>The legacy CAPTCHA challenge will be removed from the SSPR experience.<\/li>\n
      2. <\/span>Users will continue to reset passwords as they do today without additional prompts.<\/li>\n
      3. <\/span>Backend throttling and behavior-based detection will protect against bots and abuse.<\/li>\n
      4. <\/span>No users will be blocked from completing SSPR.<\/li>\n
      5. <\/span>There is no impact to users’ ability to reset their passwords.<\/li>\n
      6. <\/span>No changes to authentication methods, policies, or configurations.<\/li>\n
      7. <\/span>No new admin controls will be introduced.<\/li>\n
      8. <\/span>The feature is enabled by default and managed by Microsoft.<\/li>\n<\/ol>\n

        [Action Required\/Recommendations]<\/strong><\/p>\n

        No action is required.<\/p>\n

        As an optional best practice:<\/p>\n

          \n
        1. <\/span>Inform your helpdesk that CAPTCHA prompts will no longer appear in SSPR flows.<\/li>\n
        2. <\/span>Update internal documentation if it references CAPTCHA during password reset.<\/li>\n<\/ol>\n

          [Compliance considerations]<\/strong><\/p>\n

          No compliance considerations identified, review as appropriate for your organization.<\/p>\n<\/td>\n<\/tr>\n

Machine Translation<\/th>\n\n

2026\u5e747\u670820\u65e5\u66f4\u65b0:\u30bf\u30a4\u30e0\u30e9\u30a4\u30f3\u3092\u66f4\u65b0\u3057\u307e\u3057\u305f\u3002\u3054\u8f9b\u62b1\u3044\u305f\u3060\u304d\u3042\u308a\u304c\u3068\u3046\u3054\u3056\u3044\u307e\u3059\u3002 <\/p>\n

\u3010\u4f55\u3068\u306a\u305c\u3011<\/strong><\/p>\n

Microsoft Entra\u306e\u30bb\u30eb\u30d5\u30b5\u30fc\u30d3\u30b9\u30d1\u30b9\u30ef\u30fc\u30c9\u30ea\u30bb\u30c3\u30c8(SSPR)\u3092\u66f4\u65b0\u3057\u3001\u5f93\u6765\u306eCAPTCHA\u3092\u6700\u65b0\u306e\u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u30b9\u30ed\u30c3\u30c8\u30ea\u30f3\u30b0\u3068\u884c\u52d5\u30d9\u30fc\u30b9\u306e\u60aa\u7528\u691c\u51fa\u306b\u7f6e\u304d\u63db\u3048\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u5909\u66f4\u306b\u3088\u308a\u3001\u30e6\u30fc\u30b6\u30fc\u306e\u6469\u64e6\u3092\u6e1b\u3089\u3059\u3068\u3068\u3082\u306b\u3001\u81ea\u52d5\u653b\u6483\u3084\u30a2\u30ab\u30a6\u30f3\u30c8\u5217\u6319\u304b\u3089\u306e\u4fdd\u8b77\u3092\u5f37\u5316\u3059\u308b\u3053\u3068\u3067\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3001\u30a2\u30af\u30bb\u30b9\u6027\u3001\u4fe1\u983c\u6027\u304c\u5411\u4e0a\u3057\u307e\u3059\u3002\u8a2d\u5b9a\u306e\u5909\u66f4\u306f\u4e00\u5207\u5fc5\u8981\u3042\u308a\u307e\u305b\u3093\u3002\u3053\u306e\u5909\u66f4\u306fMicrosoft\u304c\u5b8c\u5168\u306b\u7ba1\u7406\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n

[\u5c55\u958b\u30b9\u30b1\u30b8\u30e5\u30fc\u30eb]<\/strong><\/p>\n

\u4e00\u822c\u516c\u958b(\u4e16\u754c): <\/strong>\u5c55\u958b\u306f 2026\u5e748\u6708\u521d\u65ec<\/strong> (\u4ee5\u524d\u306f7\u6708\u4e0b\u65ec)\u306b\u958b\u59cb\u3055\u308c\u3001 2026\u5e748\u6708\u4e0b\u65ec<\/strong> (\u4ee5\u524d\u306f8\u6708\u4e2d\u65ec)\u307e\u3067\u306b\u5b8c\u4e86\u3059\u308b\u898b\u8fbc\u307f\u3067\u3059\u3002<\/p>\n

[\u7d44\u7e54\u3078\u306e\u5f71\u97ff]<\/strong><\/p>\n

\u5f71\u97ff\u3092\u53d7\u3051\u308b\u4eba\u7269<\/em><\/p>\n

    \n
  1. <\/span>\u3059\u3079\u3066\u306eMicrosoft Entra\u30c6\u30ca\u30f3\u30c8\u304c\u30bb\u30eb\u30d5\u30b5\u30fc\u30d3\u30b9\u30d1\u30b9\u30ef\u30fc\u30c9\u30ea\u30bb\u30c3\u30c8(SSPR)\u3092\u4f7f\u7528\u3057\u3066\u3044\u308b\u5834\u5408<\/li>\n<\/ol>\n

    \u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\/\u30b5\u30fc\u30d3\u30b9<\/em><\/p>\n

      \n
    1. <\/span>Microsoft Entra, self-service password reset (web flow)<\/li>\n<\/ol>\n

      \u4f55\u304c\u8d77\u3053\u308b\u306e\u304b<\/em><\/p>\n

        \n
      1. <\/span>\u30ec\u30ac\u30b7\u30fc\u306eCAPTCHA\u30c1\u30e3\u30ec\u30f3\u30b8\u306fSSPR\u4f53\u9a13\u304b\u3089\u524a\u9664\u3055\u308c\u307e\u3059\u3002<\/li>\n
      2. <\/span>\u30e6\u30fc\u30b6\u30fc\u306f\u73fe\u5728\u3068\u540c\u69d8\u306b\u8ffd\u52a0\u306e\u30d7\u30ed\u30f3\u30d7\u30c8\u306a\u3057\u3067\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u30ea\u30bb\u30c3\u30c8\u3092\u7d9a\u3051\u307e\u3059\u3002<\/li>\n
      3. <\/span>\u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306e\u30b9\u30ed\u30c3\u30c8\u30ea\u30f3\u30b0\u3084\u884c\u52d5\u30d9\u30fc\u30b9\u306e\u691c\u51fa\u306f\u3001\u30dc\u30c3\u30c8\u3084\u60aa\u7528\u304b\u3089\u5b88\u308a\u307e\u3059\u3002<\/li>\n
      4. <\/span>\u30e6\u30fc\u30b6\u30fc\u304cSSPR\u306e\u5b8c\u4e86\u3092\u59a8\u3052\u3089\u308c\u308b\u3053\u3068\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/li>\n
      5. <\/span>\u30e6\u30fc\u30b6\u30fc\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u30ea\u30bb\u30c3\u30c8\u306b\u306f\u5f71\u97ff\u304c\u3042\u308a\u307e\u305b\u3093\u3002<\/li>\n
      6. <\/span>\u8a8d\u8a3c\u65b9\u6cd5\u3001\u30dd\u30ea\u30b7\u30fc\u3001\u8a2d\u5b9a\u306e\u5909\u66f4\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/li>\n
      7. <\/span>\u65b0\u305f\u306a\u7ba1\u7406\u7ba1\u7406\u306f\u5c0e\u5165\u3055\u308c\u307e\u305b\u3093\u3002<\/li>\n
      8. <\/span>\u3053\u306e\u6a5f\u80fd\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u6709\u52b9\u5316\u3055\u308c\u3066\u304a\u308a\u3001Microsoft\u304c\u7ba1\u7406\u3057\u3066\u3044\u307e\u3059\u3002<\/li>\n<\/ol>\n

        [\u884c\u52d5\u304c\u5fc5\u8981\/\u63d0\u8a00]<\/strong><\/p>\n

        \u4f55\u306e\u5bfe\u5fdc\u3082\u5fc5\u8981\u3042\u308a\u307e\u305b\u3093\u3002<\/p>\n

        \u30aa\u30d7\u30b7\u30e7\u30f3\u306e\u30d9\u30b9\u30c8\u30d7\u30e9\u30af\u30c6\u30a3\u30b9\u3068\u3057\u3066:<\/p>\n

          \n
        1. <\/span>\u30d8\u30eb\u30d7\u30c7\u30b9\u30af\u306b\u3001CAPTCHA\u30d7\u30ed\u30f3\u30d7\u30c8\u306fSSPR\u30d5\u30ed\u30fc\u306b\u8868\u793a\u3055\u308c\u306a\u304f\u306a\u308b\u3053\u3068\u3092\u4f1d\u3048\u3066\u304f\u3060\u3055\u3044\u3002<\/li>\n
        2. <\/span>\u30d1\u30b9\u30ef\u30fc\u30c9\u30ea\u30bb\u30c3\u30c8\u6642\u306bCAPTCHA\u3092\u53c2\u7167\u3057\u3066\u3044\u308b\u5834\u5408\u306f\u5185\u90e8\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3092\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/li>\n<\/ol>\n

          [\u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306e\u8003\u616e\u4e8b\u9805]<\/strong><\/p>\n

          \u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u4e0a\u306e\u61f8\u5ff5\u4e8b\u9805\u306f\u7279\u5b9a\u3055\u308c\u305a\u3001\u7d44\u7e54\u306b\u5fdc\u3058\u3066\u30ec\u30d3\u30e5\u30fc\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

          MC1400824 | (Updated) Microsoft Entra: Self-service password reset CAPTCHA protection updated Classification p […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-17404","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/17404","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=17404"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/17404\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=17404"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=17404"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=17404"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}