SOLVED

Office 365 SSPR

%3CLINGO-SUB%20id%3D%22lingo-sub-213756%22%20slang%3D%22en-US%22%3EOffice%20365%20SSPR%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213756%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20trying%20to%20enable%20SSPR%20for%20all%20of%20our%20users%2C%20and%20according%20to%20the%20document%20linked%20below%2C%20having%20an%20e5%20license%20satisfies%20the%20requirements%20for%20this%20to%20work.%26nbsp%3B%20All%20our%20users%20have%20e5%20licenses%20assigned%20to%20them%2C%20but%20according%20to%20the%20Azure%20AD%20portal%2C%20on%20premise%20integration%20is%20not%20enabled.%26nbsp%3B%20I%20have%26nbsp%3BAzure%20AD%20connect%20configured%20on%20premise%2C%20and%20have%20turned%20off%20and%20on%20password%20write%20back%20multiple%20times.%26nbsp%3B%20I%20also%20have%20ensured%20that%20the%20sync%20account%20has%20all%20the%20right%20permissions.%26nbsp%3B%20Not%20sure%20why%20it%20is%20not%20working%2C%20but%20I%20want%20to%20rule%20out%20needing%20to%20have%20Azure%20AD%20Premium%20even%20though%20the%20document%20claims%20it%20works%20for%20e5%20users.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fauthentication%2Fconcept-sspr-licensing%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fauthentication%2Fconcept-sspr-licensing%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-213756%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-213815%22%20slang%3D%22en-US%22%3ERE%3A%20Office%20365%20SSPR%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213815%22%20slang%3D%22en-US%22%3EWe%20just%20have%20office%20365%20E5.%20This%20explains%20why%20it%20is%20not%20working.%20I%20was%20unaware%20there%20was%20a%20Microsoft%20365%20E5.%20Thanks%20for%20your%20help.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-213801%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20SSPR%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213801%22%20slang%3D%22en-US%22%3EThat%20document%20specifies%20Microsoft%20365%20E3%20or%20E5%20(a%20bundle%20of%20Office%20365%20and%20EMS).%20Do%20you%20have%20the%20full%20Microsoft%20365%20E5%20or%20just%20Office%20365%20E5%3F%20Office%20365%20E5%20is%20not%20enough%20on%20it's%20own%20for%20this%20feature.%20Azure%20AD%20Premium%20is%20required%2C%20which%20is%20a%20component%20of%20all%20of%20the%20following%20licenses%20and%20packages%3A%3CBR%20%2F%3E%3CBR%20%2F%3EAzure%20AD%20Premium%20P1%3CBR%20%2F%3EAzure%20AD%20Premium%20P2%3CBR%20%2F%3EEnterprise%20Mobility%20%2B%20Security%20E3%20or%20A3%3CBR%20%2F%3EEnterprise%20Mobility%20%2B%20Security%20E5%20or%20A5%3CBR%20%2F%3EMicrosoft%20365%20E3%20or%20A3%3CBR%20%2F%3EMicrosoft%20365%20E5%20or%20A5%3CBR%20%2F%3EMicrosoft%20365%20F1%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

I am trying to enable SSPR for all of our users, and according to the document linked below, having an e5 license satisfies the requirements for this to work.  All our users have e5 licenses assigned to them, but according to the Azure AD portal, on premise integration is not enabled.  I have Azure AD connect configured on premise, and have turned off and on password write back multiple times.  I also have ensured that the sync account has all the right permissions.  Not sure why it is not working, but I want to rule out needing to have Azure AD Premium even though the document claims it works for e5 users.

 

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-licensing

2 Replies
Highlighted
Solution
That document specifies Microsoft 365 E3 or E5 (a bundle of Office 365 and EMS). Do you have the full Microsoft 365 E5 or just Office 365 E5? Office 365 E5 is not enough on it's own for this feature. Azure AD Premium is required, which is a component of all of the following licenses and packages:

Azure AD Premium P1
Azure AD Premium P2
Enterprise Mobility + Security E3 or A3
Enterprise Mobility + Security E5 or A5
Microsoft 365 E3 or A3
Microsoft 365 E5 or A5
Microsoft 365 F1
Highlighted
We just have office 365 E5. This explains why it is not working. I was unaware there was a Microsoft 365 E5. Thanks for your help.