Go into Azure AD, select your directory, and click on Configure in the bar at the top. There is a setting for "user password reset policy" you need to enable. Once you enable it there you should be ...