Azure password writeback and Onprem AD - SSPR

Question

G'Day,

1 - The tenant has Business Premium licenses and does not have azure P1 or P2. I don't think P1 is required for password writeback.

I was able to successfully set up SSPR, a hard match for the existing onprem users and the user was successfully able to change the password on premises and it has successfully synced with azure and 365. The problem is it is the sspr portal is throwing an error (0029). I've set up microsoft Entra connect and not sync provisioning. I've also followed done the following.

1- Add the AD DS Connector account to the list of allowed users

2- enabled password reset , change and other recommended permissions for the ADDS connector account.

3- The account testing used to have onprem admin privileges and I've removed it from all the groups. The Admin count attribute is set to 0 manually and I think I've made a mistake here.

4- This is the log that I am getting

Any ideas to fix the issue.

Answer 1

Hello @Warnakulasuriya Fernando ,

I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer.

Issue: Azure password writeback and Onprem AD - SSPR

Solution: The above problem was solved and had to add the connector account and delegate its permission to the correct OU where the users are in.

If you have any other questions or are still running into more issues, please let me know. Thank you again for your time and patience throughout this issue.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Answer 2

Hi @Warnakulasuriya Fernando

The P1 is required , to have more information about prerequisite please refer to the following MS article:

Tutorial: Enable Microsoft Entra self-service password reset writeback to an on-premises environment

---

Please don't forget to accept helpful answer

---