How to use "forgot your password?" to change password in AD?

[Gustav L'Estrade]

Hi,

I am currently looking into how to make the "Forgot your password" link (at login screen) let the users change their passwords in the Active Directory. 

As of now, the user directory is set as "Read/Write", and there are outgoing emails setup. When clicking the link i am greeted with a screen showing that the instance does not support password reset. 

Two questions:

What determine if the instance support password resets?

Can password reset be setup to also change the password in the AD?

Thanks for any help or insights about the matter!

[Lars Olav Velle _Polar SSO_ · Accepted solution]

I am not sure you can get there as I have not tried, but in theory it should work. You will run into cases where the password has expired. Resetting the password will in that case not work. 

I would rather just set up an AD FS-server, enable  the endpoint adfs/portal/updatepassword and to top it up add a http redirect somewhere from e.g. https://changepassword.domain.com to make it easier to remember. Resetting an expired password will work also.