0 votes

We have just begun migrating OnPrem Exchange accounts to O365, and I had a question about the Synchronize Passwords option under the Office 365 area of Adaxes. Currently the option is unchecked for our tenants, do we need to activate this checkbox to ensure that password changes made in Adaxes will sync up to O365 Exchange? If we leave it unchecked, will the passwords be out of sync (Windows logins will be changed to the new password, but O365 will not be changed)?

Thank you!

by (360 points)

1 Answer

0 votes
by (216k points)
selected by
Best answer

Hello,

The Synchronize passwords option is needed to update user passwords immediately after their password is set or changed in Adaxes. If you keep the option unchecked, there are 2 possibilities:

  • If your AD accounts are synchronized with Office 365 using DirSync, and you have Password Synchronization implemented, the passwords will be eventually updated in Office 365 via DirSync upon the nearest synchronization event.
  • If you don't use DirSync or don't have Password Synchronization implemented, passwords will not be synchronized.
0

Excellent, thank you! That is exactly what I needed to know.

0

As an update, we have checked the box, however now we get the following error when passwords are reset by the Service Desk using an existing Adaxes web portal page:

"Failed to reset password in Office 365. You cannot reset a password for a federated user."

Are there changes we need to make on the portal page side? Or in O365? Or do you need more details? I'm guessing that DIRSYNC is still syncing the password every 3 hours, but I'm not really sure.

We use local AD, but the users have access to a Sharepoint Online page (that they access with their on-prem credentials via Azure AD group permissions).

0

Hello,

It looks like in such an environment, passwords are write back attributes and can be changed on premises only. You cannot change passwords directly in Office 365.

We suggest disabling the Synchronize Passwords option and let DirSync update passwords in Office 365. For more information, have a look at the following thread on Microsoft Support forums: https://community.office365.com/en-us/f/613/t/7737.

Related questions

0 votes
1 answer

When enrolling a user for self-service with Adaxes, does this qualify them to reset their passwords via Microsoft Online as well? A lot of our SaaS products use Microsoft ... policies? I.e. Security Questions setup with Microsoft Account, MFA etc. Thanks, Dean

asked Jul 14, 2020 by dcallaghan (20 points)
0 votes
1 answer

Is it possible to trigger an external API request to update another directory whenever an AD user changes his password? Even if the password change didn't occur using adaxes, but directly in Active Directory? Thank you.

asked May 29, 2020 by nicolasdsa (20 points)
0 votes
1 answer

I'm trying to modify this report to only output results where employeeType equals the values below. It reports fine. I would also like to include where employeeType ... = "(&" + $filterUsers + $filterPasswordLastSet + $customAttribute + $enabledUser + ")"

asked Mar 28 by tromanko (180 points)
0 votes
1 answer

Is there a way to autogenerate passphrases instead of generating random character passwords? Passphrase examples: repetition temper calculator powder northern busy

asked Jul 12, 2022 by Tfarmer (160 points)
0 votes
1 answer

We are trying to do a report on weak passwords, but i dont think adaxes is able to?

asked Mar 16, 2022 by marcwoollard (40 points)
3,346 questions
3,047 answers
7,772 comments
544,968 users