ManageEngine ADSelfService Plus is an integrated self-service password management and single sign on solution. This solution helps domain users perform self-service password reset, self-service account unlock, employee self-update of personal details (e.g., mobile numbers and photos) in Microsoft Windows Active Directory. ADSelfService Plus also provides users with secure, one-click access to all SAML-supported enterprise applications, including Office 365, Salesforce, and G Suite, through Active Directory-based single sign-on (SSO). For improved security, ADSelfService Plus offers Windows two-factor authentication for all remote and local logins. Administrators find it easy to automate password resets, account unlocks while optimizing IT expenses associated with help desk calls.

Features

Self-service Password Reset

Allow users to reset and change their domain passwords in Windows Active Directory on their own.

Self-service Account Unlock

Let domain users self-unlock their Windows Active Directory account without IT assistance.

Password/Account Expiration Notification

Remind users of their upcoming Active Directory password expiration date via email, SMS, and push notifications.

Password Policy Enforcer

Enforce fine-grained password policies for Active Directory that includes a password dictionary filter, a pattern checker, and more.

Password Self-service from Logon Screens

Provide users access to password self-service from the login prompts of Windows, macOS, Linux, Outlook Web Access, Citrix Web Interface, and SharePoint.

Cached Credential Update via VPN

Allow users to force update their forgotten Active Directory cached credentials with self-service password reset.

MFA for Window, MacOS, and Linux Machines

Secure Windows, macOS, and Linux logons with multi-factor authentication (MFA) for remote and local access to network resources.

MFA for VPNs

Secure VPN connections to your organizations' network and resources with multi-factor authentication (MFA).

Conditional Access Policies

Automate access control decisions, like enforcing MFA for login or restricting access to self-service features and SSO, based on parameters like IP address, device, business hours, or geolocation.

MFA for Password Self-service

Secure self-service password reset and account unlock attempts with multi-factor authentication.

Windows Logon Two-factor Authentication

Enforce two-factor authentication for every Windows logon, including both remote and local logons, for improved security.

Automatic Password Resets and Account Unlocks

Scouts for forgotten or expired passwords and locked out accounts, and schedules automated password resets and account unlocks.

Password status Reports, Email Notifications, and Security

Ensure IT security by helping admins generate, schedule, and export audit reports as well as reports on password status.

Active Directory Password Recovery

While it’s impossible to recover forgotten or expired passwords in Windows Active Directory, you can empower users with self-service password reset capability..

Mobile Password Management

ADSelfService Plus' mobile apps for Android and iOS devices help users perform password self-service actions from anywhere, anytime.

Password Management Benefits

Implemeting ADSelfService Plus in your IT environment reduces IT expenses, improves security and the end-user experience, and creates a happy IT workforce!.

Reduce Help Desk Tickets

Securely eliminate help desk tickets by combining self-service password management with multi-factor authentication, and ease the burden on your IT help desk.

Self-service Directory Update

Offer a secure portal through which end users can self-update their Active Directory profile information.

Employee Directory Search

Provide a self-service employee search tool that helps end users find their colleagues’ Active Directory profile information.

Organization Chart

Display a detailed organization chart that helps end users find coworkers’ reporting staff and direct reports.

Enterprise Single Sign-on

Allow users to access multiple enterprise applications with one identity using single sign-on.

Real-time Password Synchronizer

Synchronize Active Directory password resets and changes with connected enterprise applications in real time.

Multi-platform Granular Password Policy

Enforce granular password policies across Windows Active Directory and cloud applications such as Office 365 and G Suite.

Single Sign-on for Custom Applications

Provide a secure single sign-on solution for all SAML-supported custom applications.

Two-factor Authentication for Improved Cloud Security

Provide secure access to cloud applications using two-factor authentication.

Password Self-service for cloud Apps

Allow users to reset the passwords of their accounts for enterprise cloud applications, including Office 365 and Salesforce, without IT assistance.

Active Directory Authentication

Provide secure Active Directory authentication for SAML-enabled enterprise applications such as Office 365 and Salesforce.