Self Service Password reset unable to set write back passwords

Question

I am unable to set write back passwords on Self Service password reset in Azure even though I have writeback passwords set on my Azure AD Connect. My on premis domain is a single domain using server 2019. I am using a Domain Admin account as the on premise account and I have disabled full synced enabled full synced the write back option with no success.

Answer 1

@Ian Mathews Do you have required license for Azure AD SSPR? To use password writeback, you must have one of the following licenses assigned on your tenant:

• Azure AD Premium P1
• Azure AD Premium P2
• Enterprise Mobility + Security E3 or A3
• Enterprise Mobility + Security E5 or A5
• Microsoft 365 E3 or A3
• Microsoft 365 E5 or A5
• Microsoft 365 F1
• Microsoft 365 Business

Refer to https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-writeback#licensing-requirements-for-password-writeback for more details.

-----------------------------------------------------------------------------------------------------------

Please "Accept as answer" wherever the information provided helps you to help others in the community.

Answer 2

The documentation is a bit ambitious. I have office 365 licenses but apparently that only gets me Cloud based accounts. If I want full write back I need a minimum Azure AD Premium P1 which is an additional $6 per user. Since I already pay the 12.50 for office the additional $6 just for a portal is a waste. At that price I will just make my own reset tool.