Password writeback SSPR_0030:

ISE 10 Reputation points
2024-03-22T09:17:43.35+00:00

I did a swing migration of AD Connect and export/import from a DC to a doman-joined Windows 2022. However, when I try SSPR I get the following error (image). However, I verified together with an MS Engineer that there are no connectivity issues from the new server. I've disabled and re-enabled writeback, but still no success. However, I see this error when the AD Sync service restarts.

ssprissue

TrackingId: 3c04d636-7c80-4c06-a9b7-380c997692ee, Listener for Namespace: ssprdedicatedsbprodweu, Endpoint: 6b4d1213-177e-4265-8d11-66892fc886c5_c99d45ac-47f4-476c-b38f-ed151dd3b1e5 offline Event. Last error encountered System.ServiceModel.CommunicationException: The connection to the connect service was lost. ---> Microsoft.ServiceBus.ConnectionLostException: The connection to the connect service was lost.

--- End of inner exception stack trace ---, Details: Version: 5.0.922.0

Any additional insights from the community will be appreciated.

Microsoft Security Microsoft Entra Microsoft Entra ID
{count} votes

4 answers

Sort by: Most helpful
  1. ISE 10 Reputation points
    2024-03-22T11:16:12.7233333+00:00

    I was able to resolve the issue. This is just super weird. On the only DC I had installed the cloud provisioning agent (cloud sync) and also installed in on the new one. However, I uninstalled from the DC but this error was shown which is expected but it was green for the new server. I then decided to remove the yellow checkbox and guess what started to work...SSPR!

    User's image

    2 people found this answer helpful.

  2. ISE 10 Reputation points
    2024-03-22T10:02:04.8533333+00:00

    I also ensured the following:

    1. Check network connectivity: Verify that the Azure AD Connect server has connectivity to the on-premises Active Directory. (all good)
    2. Review the ADConnect and SSPR configuration: Verify that the ADConnect and SSPR settings are configured correctly. (verified)
    3. Check the authentication: Verify that the user performing the SSPR has the correct permissions and that the authentication settings are correct. (user has GA rights)
    4. Verify the version: Verify that you're using the correct version of ADConnect and that it is compatible with the SSPR feature. (latest version)
    5. Check for missing prerequisites: Verify that the SSPR feature requirements are met. (verified also)
    0 comments No comments

  3. Thameur-BOURBITA 36,261 Reputation points Moderator
    2024-03-22T10:19:55.2066667+00:00

    Hi @ISE

    Did you try to restart the Entra connect server ?

    Some links should help you for troubleshooting :

    Troubleshoot self-service password reset in Microsoft Entra ID

    How does self-service password reset writeback work in Microsoft Entra ID?


    Please don't forget to accept helpful answer


  4. Thameur-BOURBITA 36,261 Reputation points Moderator
    2024-03-22T13:04:13.6+00:00

    Hi @ISE

    Happy to hear that your problem is fixed and thank you for sharing your feedback.

    I will ad your answeras a comment to let you accept it and close this thread.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.