Password write back

Question

Hi All

When enabled SSPR and enable Password write back feature in AAD connect and Azure Portal, where does the password reset happens first when a federated user reset the password using SSPR,
Is it first on Azure AD and write back to OnPrem AD or reset in OnPrem AD and password hash synch to Azure AD

PS: PHS is enabled in AAD connect

Thank you in advance!

Answer 1

Hello @RST ,

Thanks for reaching out.

when users change or reset their passwords using SSPR in the cloud, new passwords would be written back to the on-premises AD DS environment (the source of authority) and updated passwords hash will then synchronized to cloud through AAD Connect in real time.

To lean more, refer : https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-writeback#how-password-writeback-works

Hope this helps.

------
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.