Your organization uses Microsoft Entra Connect Sync to synchronize identities from on-premises Active Directory. You have enabled self-service password reset (SSPR) for all cloud users. Users report that when they reset their password via the SSPR portal, they can sign in to Microsoft 365 successfully, but the new password is not accepted when they log in to their domain-joined workstations on the corporate network. What must you configure to resolve this issue?