User Self-Reset of Passwords
ManageEngine ADSelfService Plus can perform Single Sign-On (SSO) logins to many other applications from one console. ADSelfService Plus allows one-click login to SAML-enabled applications, including Office365, SalesForce, and GSuite, thanks to AD SSO. The tool also extends security with the help of many supported methods of double authorization, such as SMS, email, YubiKey, Google Authenticator, and many more.
With the increased independence of users, administrators regain a lot of time. The system also has many reports, which can audit each independent password restart.
ADSelfService Plus Offerings
Single Sign-On (SSO) logins to many other applications from one console.
Independent password reset in the domain
ManageEngine ADSelfService Plus allows the end-user to reset passwords and unlock the account based on security questions or some other type of double authentication. With the help of the GINA agent, ADSelfService Plus also makes these functions available from the Windows screen on the user's device.
The employee also has access to their personal data and can update it themself.
Assign policies to OUs and groups
ManageEngine ADSelfService Plus can define password policies for given groups or Organizational Units (OU), along with the possibility of granting access to functions such as independent password reset in the domain, unblocking the account, editing personal data, and changing the password.
ADSelfService Plus can assign an appropriate security level to a given group.
Login to many applications once; SSO
After logging in to the ADSelfService Plus system once, the end-user gets access to the systems used by the company, such as Dropbox, Office365, OracleDB, and other 130 applications available out-of-the-box.
ADSelfService Plus also can add custom applications according to the SAML standard.
Audit of events, reports and independent password reset in the domain
ADSelfService Plus enables reports generated on the basis of registered users, concerning e.g. changed and expiring passwords or user licenses. ADSelfService Plus can export the report to many formats and send them periodically.
ManageEngine ADSelfService Plus Pricing
Frequently Asked Questions
Is enrollment a one-time process?
Yes. Once the enrollment details are provided, ADSelfService Plus will always remember you!
Do I need to register for all the services?
No! Only password self-service needs to be registered. Other services such as People Search and Self-service Directory Update do not require enrollment. However, it depends on the administrator’s preference as well.
Is enrollment important; can’t I use ADSelfService Plus without enrollment?
ADSelfService Plus services can be categorized as Enrollment Requiring Services & Non-Enrollment Services.
- Enrollment Requiring Services:
- Self-Service Password Reset
- Self-Service Account Unlock
- Non-Enrollment Services:
- People Search
- Self-Service Active Directory Update
- Password Expiration Notification
Registration is needed to use the primary functions of ADSelfService Plus.
How does ADSelfService Plus work and how can it identify me in the event of a forgotten password?
Working with computers always involves authentication which is usually done by the username and password combination. Now, when ADSelfService Plus is used to reset the Windows password or to unlock a locked-down account. First, the solution has to authenticate the identity.
To do this, the solution uses any or all of the following methods depending on the IT administrator’s preference. Providing the information for the authentication is called the enrollment process.
- Security question and answer method
- In this method, either select or write a security question and answer.
- When logging in to ADSelfService Plus to reset a password or unlock an account, it asks the security question. Providing answers chosen during enrollment proves the identity and then the solution can proceed with the password reset or account unlock process.
- Verification code method
- In this method, register the mobile phone number and/or email address.
- To reset the password (or unlock the account), ADSelfService Plus will send a code to the registered mobile and/or email address.
- Enter this code in the ADSelfService Plus application to proceed with the password reset or account unlock process.
- Security question and answer method
What if I want to change my Enrollment Data?
Logon to ADSelfService Plus and edit the enrollment data. For example, the security question is “What is your favorite movie?” to which the answer is “Cast Away”. However, now the need to update the answer to “Transformer”, logon, and edit the “Security Answer” any time.
How do I install ADSelfService Plus?
Being the Swiss Partner of ManageEngine, Kidan is responsible for aiding with professional services, such as installing, implementing, configuring, training, and supporting the company to ensure an effective on-boarding of ADSelfService Plus.
To make it even better, Kidan even provides advice on top of it all!
Get in touch with us to know more.
Want to continue the
Thank you for your interest in ManageEngine's ADSelfService Plus solution. Please fill out the form below to ask a question or request assistance.