Password Writeback General Questions

Question

So, I'm trying to understand some more intricate inter workings of PasswordResetService. Unlike the pass-through authentication feature, there is no windows service that runs for password writeback. It is my understanding that password writeback uses a service bus relay that's specific to the tenant. Why do I not see that in my tenant, and how is this working under-the-hood? Is there no need for multiple "instances" like there is for pass-through Authentication? Is it a WCF service, and if so, what is that doing, and how is high availability acconted for?

Answer 1

its enabled with AADConnect:

https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-writeback
https://learn.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr-writeback

If you want redundancy, you can have more than one AADConnect serve, but only one server at a time can sync with the tenant, the other server is in staging mode but can easily be switched if necessary.

Answer 2

@Andy David - MVP thanks for the response! Just want to be clear in my understanding, the writeback service isn't actually a windows service? It's just a WCF endpoint that is created when you choose to enable password writeback in AAD Connect?