Configuring password synchronization for Office 365

Solution:

ADSelfService Plus' Real-time Password Synchronizer feature allows you to automatically synchronize password resets and changes in Active Directory (AD) across a range of on-premises and SaaS applications in real time. This feature helps a great deal in reducing password-related help desk calls, as users will only have to maintain a single password across multiple platforms.

Prerequisites

Before you configure password synchronization for Office 365 or Azure AD, you need to install the Windows Azure AD module for Windows PowerShell on the machine in which ADSelfService Plus is deployed.

Steps to install Windows Azure AD module:

1. Open an elevated PowerShell prompt.
2. Execute the following commands:
   • Install-module msonline
   • Install-module AzureAd

Steps to configure Office 365/Azure accounts with ADSelfService Plus:

1. Log in to the ADSelfService Plus admin console.
2. Navigate to Configuration → Self-Service → Password Sync/Single Sign On → Add Application..
3. Select the Office365/Azure accounts application.
Note: You can also find Office365/Azure accounts application that you need from the search bar located in the left pane or the alphabet-wise navigation option in the right pane.



4. Enter the Application Name and Description.
5. Enter the Domain name of your Office365/Azure account
6. In the Assign Policies field, select the policies for which password sync needs to be enabled.



Note: ADSelfService Plus allows you to create OU and group-based policies for your AD domains. To create a policy, go to Configuration > Self-Service > Policy Configuration > Add New Policy.
7. Select Enable Password Sync.
8. Enter the Username and Password of your Office 365/Azure admin account. Click Add Application.
9. Click Add Application

Once all the aforementioned steps to change your password are completed, you should be able to log in to your AD domain and Office365/Azure with the same new password.

Note: By default, the AD account will be automatically linked to the Office 365 account based on the sAMAccountName attribute. In other words, a user’s sAMAccountName in AD will be mapped to their username in Office 365. ADSelfService Plus also lets you link the accounts manually based on any attribute of your choice. For more details on manual account linking, click here.