SSPR not working

Question

Hi,

I'm sure that others have asked and I've checked other answers and I have gone through the troubleshooter but I still need some help.

I have followed the instructions for setting up the scenario. I have set up two methods of authentication for a test group with two non-admin users that have an O365 license and our organisation has an Azure P1 license, so for that it should all be fine.

I have checked the user under our AD connect Directory Synchronisation page and the check boxes and other pages and it all the right things seem to be checked, but when I look at the effective permissions of the AD Connect user, it still says it does not have permission to reset passwords which I think is the cause of the issue. I also think I've got too many instances of the SELF user.

I've included some screenshots of the settings etc.

sspr1.jpg

sspr2.jpg

If someone can advise me then it would be greatly appreciated.

Thanks,

DK

Answer 1

Did you set the correct perms for the AADConnect service account? https://learn.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr-writeback#configure-account-permissions-for-azure-ad-connect