A company wants to reduce the number of helpdesk tickets caused by users forgetting their passwords. They want employees to be able to securely reset their own passwords from any device without contacting IT support. Which Microsoft Entra ID capability should they enable?