Password writeback is used for synchronizing password changes in Azure AD back to your on-premises Active Directory environment. This setting is enabled as part of Azure AD Connect, and it provides a secure mechanism to send password changes from Azure AD back to an on-premises Active Directory.
It provides the following features and capabilities:
- Enforcement of on-premises Active Directory password policies: When a user resets their password, the on-premises Active Directory policy is checked to ensure it meets the password requirements before it gets committed to the directory. It checks the password complexity, history, password filters, age, and other password restrictions that are defined in the on-premises Active Directory.
- Zero-delay feedback: Users are notified immediately after changing their password if their password doesn't meet the on-premises Active Directory policy requirements. This is a synchronous operation.
- Supports password writeback when...