The Self Service Password Reset feature in Microsoft 365 Business just got upgraded with additional on-premises password writeback support.
Microsoft 365 Business is a subscription service through which Microsoft provides customers with all the productivity in the Office 365 suite, coupled with advanced device management and security capabilities to help them run their organizations in the cloud.
Self Service Password Reset makes it possible for IT administrators to provide Microsoft 365 Business users with the means to unlock their accounts or reset their passwords.
On-premises support was previously announced for Active Directory, and the just-added password writeback capabilities will now allow users to change their password using Self Service Password Reset in the cloud and have it “written back to an existing on-premises directory in real time.”
Providing Microsoft 365 Business users with password self-management options will streamline password operations in the long run and will also help “ensure consistent application of password policies,” according to Microsoft.
The company also outlined the exact steps needed to roll out Self Service Password Reset with password writeback for Microsoft 365 Business customers:
- Develop a SSPR roll-out Strategy: To ensure a smooth rollout of the Azure Active directory (Azure AD) self-service password reset (SSPR) functionality, it is often helpful to develop a roll strategy that involves educating users & piloting it with a small subset of users. Learn more in this how-to guide
- Pre-populate authentication data: In order to reset their passwords, users need to provide some form of authentication (phone or email) first. You should consider pre-populating some authentication data for your users. That way users don’t need to manually register for password reset before they are able to use SSPR. Some organizations have their users enter their authentication data themselves. But many organizations prefer to synchronize with data that already exists in Active Directory. Learn more about pre-registering authentication data
- Configuring Password write back: Once you’ve completed the above steps, you can configure SSPR by enabling ‘Password Writeback’ in Azure Active Directory Connect as described in this article
Microsoft also provides extra information on how the Azure Active Self Service Password Reset feature works on its documentation website.