> ## Documentation Index
> Fetch the complete documentation index at: https://kb.mspprocess.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Deploying the M365 Password Reset Module to one M365 Tenant

> Context:MSP Process allows you to reset a user's M365 password, right from within your PSA, or from the Contacts/Tickets pages in the MSP Process UI. Using…

### Context:

MSP Process allows you to reset a user's M365 password, right from within your PSA, or from the Contacts/Tickets pages in the MSP Process UI. Using the feature is exceedingly easy, but there are a few quick setup steps that need to be taken before the feature can be used.

### Linking MSP Process to your M365 Environments

You'll need to deploy our Enterprise Application to your customer's M365 environments before MSP Process can change an end-user's password.

#### Creating the App Registration

1. Login to your Microsoft Azure portal ([https://portal.azure.com](https://portal.azure.com/))

2. Navigate to **App Registrations**

3. Add a new App Registration, and configure it as follows (note that the URL will change, depending on the ID of your M365 integration):

4. **Name:** MSP Process: M365 Password Reset

5. **Supported Account Types:** Accounts in this organizational directory only (Default Directory Only- Single Tenant)

6. **Redirect URI:** This is an optional field; please leave it blank

7.

8. Click **Register** when you're ready.

#### Assigning Permissions

1. Within the App Registration that you just registered, navigate to the **Manage -> API permissions** blade

2. Choose **Microsoft Graph API**

3. Choose **Application permissions**

4. Configure the App Registration to have the following permissions (all are Application-level permissions):

5. **Application.Read.All**

6. **Group.Read.All**

7. **GroupMember.Read.All**

8. **User-PasswordProfile.ReadWrite.All**

9. **User.ReadWrite.All**

10. **UserAuthenticationMethod.ReadWrite.All**

11. Once you've added those permissions, it should look like this:

12. ![](https://mintcdn.com/triggr/qgn0c5cLkGKqcauq/images/msp-process-kb/a1a2a32a330a.webp?fit=max\&auto=format\&n=qgn0c5cLkGKqcauq\&q=85\&s=e5878f84c4644692704b1fb00ef1c4e0)

13. Click the *Grand admin consent for \<your domain>* button

#### Creating a Client Secret

1. Within the App Registration, navigate to the **Manage -> Certificates & Secrets** blade
2. Click the *+ New client secret* button
3. Specify a name for this client secret, and set the expiration date to be 730 days (24 months)
4. Click the *Add* button
5. Copy the *Value* of this new client secret - you'll need it in the next section

#### Configuring MSP Process to Communicate with the App Registration

1. Login to MSP Process ([https://app.mspprocess.com](https://app.mspprocess.com)) as an Admin-level user

2. Navigate to the **Settings -> Integrations -> Security Integrations** page

3. Click on the *Add New Integration* button

4.

5. Click on the *M365 Identity Management* button

6.

7. Fill in the required fields:

8.

9. Click the **Submit** button to finish setting everything up

### Using the Password Reset Feature

The Password Reset feature is available in the MSP Process UI, from either the **Contacts** page or the **Tickets** page. It's also available in the ConnectWise and HaloPSA "pods", and will shortly be available in the Autotask Insight.

In order to change a user's M365 password, they must first be verified using the End-User Verification feature. If they haven't yet been verified, we'll show you this handy message when you hover over the Password Reset button:

Once you've verified the user's identity though, you can then invoke the Password Reset feature:

You'll then be asked to confirm that you want to reset their password:

### What Is Your End-User's Experience?

We send the user their new password through our Secure Data Sharing feature - ensuring a branded and consistent experience. The link to their new password is sent as an SMS message, to the phone number they have registered in Microsoft as an Authentication Method:


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.