Enabling password writeback so users can change their passwords from the Office 365 portal

Most of our users are office based and can change their passwords directly from their own PC’s to update Active Directory.

We have some users who are either rarely in the office or do not have access to the internal network and therefore Active Directory. Most of these users are also in different timezones with no local IT support.

Cloud only users can manage their passwords from the Office 365 portal for free without additional licenses, but AD users cannot change their passwords online without some additional setup. This includes either an Azure AD Premium P1 or P2 license (free trial licenses are available) and these two configuration steps:

Enabling Password Writeback in Azure AD Connect
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-writeback

Enabling Azure AD Self Service Password Reset (SSPR)
Go to https://aad.portal.azure.com
Select Users on the left, then Password Reset and in my scenario I chose Selected so only people with an Azure AD P1 license can use the SSPR feature.

Now users who are part of this group can change their password directly from https://office.com by clicking on settings, then ‘change your password’