Came across this interesting tidbit today when enabling and testing Self-Service Password Reset (SSPR) with a customer. Microsoft used to require you to enter your old password for validation before issuing a reset. Unfortunately that opened up a few issues for users that may have forgotten their password or need to reset it after expiration. […]