The following authentication methods are available for SSPR (self-service password reset) - app notification - Mobile app code - Email - Mobile phone - Office phone (available only for tenants with paid subscriptions) - Security questions https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks