question

CatherineMeyer-3185 avatar image
0 Votes"
CatherineMeyer-3185 asked AndyDavid commented

Password Writeback General Questions

So, I'm trying to understand some more intricate inter workings of PasswordResetService. Unlike the pass-through authentication feature, there is no windows service that runs for password writeback. It is my understanding that password writeback uses a service bus relay that's specific to the tenant. Why do I not see that in my tenant, and how is this working under-the-hood? Is there no need for multiple "instances" like there is for pass-through Authentication? Is it a WCF service, and if so, what is that doing, and how is high availability acconted for?

azure-ad-connectazure-ad-sspr
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AndyDavid avatar image
0 Votes"
AndyDavid answered

its enabled with AADConnect:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-writeback
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr-writeback

If you want redundancy, you can have more than one AADConnect serve, but only one server at a time can sync with the tenant, the other server is in staging mode but can easily be switched if necessary.




5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

CatherineMeyer-3185 avatar image
0 Votes"
CatherineMeyer-3185 answered AndyDavid commented

@AndyDavid thanks for the response! Just want to be clear in my understanding, the writeback service isn't actually a windows service? It's just a WCF endpoint that is created when you choose to enable password writeback in AAD Connect?

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.