Active Directory users can enroll themselves for self-service by answering AD-defined security questions. AD-defined questions rely on Active Directory attributes for their answers. The values of the attributes are the answers to these questions, and users need to correctly provide these values while answering the questions. For example, the answer to the AD question ‘what is your last name?’ is the value for the ‘sn’ AD attribute.

The following are the steps the AD user should follow when enrolling by answering AD-defined security questions:

1. Open the client interface.
   
   
   
   
2. Log in to the ADSS Client with your AD credentials. The credentials include your UPN and password. Alternatively, you may also authenticate through Azure. To sign in with Azure credentials, your user must exist in Azure Active Directory.
   
   
   
   
3. On the next screen, choose the AD-defined security questions. The answers to these questions are the values of your AD attributes. For example, the answer to the AD question ‘what is your last name?’ is the value in your ‘sn’ AD attribute. Remember these values as they will be required in the future to reset your user password or unlock your account.
   
   
   
   
4. Your user will be enrolled for self-service.
   
   
   
   
5. Re-login to the account.
   
   
   
6. Now you can update your user profile, change your password, or update your profile picture.