Self-Service Password Management and Single Sign-On Solution

Self-service password reset from anywhere, at any time

With the adoption of cloud applications and bring your own device (BYOD) policies increasing, users are leveraging multiple access points aside from their Windows PC to complete their work. ADSelfService Plus enables users to perform self-service password reset and account unlock, regardless of whether they’re in the office, on the move, or at home.

Redefining endpoint security with MFA

ADSelfService Plus offers Endpoint MFA for Windows, macOS, and Linux endpoint logins. With Endpoint MFA in place, users are first authenticated through Active Directory (AD) domain credentials, and next through one of the supported authentication techniques such as one-time passwords (OTPs) sent via SMS or email. So even if a hacker steals user credentials, they still need access to the second factor: the users’ email or mobile phone.

Single sign-on solution for cloud applications

As organizations adopt cloud applications in droves, end users end up having to deal with more and more passwords throughout the day just to complete their work. For effective user identity management, you need to adopt an efficient and secure approach to managing users’ passwords. ADSelfService Plus is an enterprise single sign-on (SSO) solution that provides users with seamless, one-click access to all SAML-enabled cloud applications. It allows users to access all their cloud applications with just one identity. With ADSelfService Plus SSO, minimize password security issues, increase productivity, and ease identity management challenges, while also enhancing user experience.

Password Expiration Notifier Tool

An important aspect of ADSelfService Plus (password self-service software), Password Expiry Reminder looks up the Active Directory for user accounts whose passwords are about to expire and emails the account owners a notification recommending Active Directory password change. Not just password expiration date, the end-users can also be notified of their account status. This tool is now 100% FREE allowing you to notify unlimited users in your organization about their password expiry.

Password policy enforcer

Cyber attacks are becoming increasingly ubiquitous and difficult to deal with. Hackers relentlessly try to exploit common weak passwords. As a result, organizations have to safeguard themselves in this never-ending game of cat and mouse. But what if you could avoid weak passwords altogether? Since any dent in cyber security can have adverse implications, it’s crucial to enforce a strong password policy. However, the native Active Directory environment doesn’t provide many options on this front.

ADSelfService Plus’ password policy enforcer effectively combats this issue by allowing you to enforce a custom password policy. It renders Windows Active Directory passwords hack-proof to ensure that your organization is secure.

Conditional access

The remote work model has proven to be advantageous to organizations and many have offered their workforce the option to work from home currently. As remote users are more susceptible to cyberattacks, strict security measures like multi-factor authentication (MFA) need to be enforced to prevent mishaps. But applying a stringent organization-wide access policy like MFA might have adverse effects on the user experience. While two or three-factor authentication can secure remote logins, it might be an unnecessary hassle for on-premise users already secured within the perimeter of the office. A more efficient approach is to apply access policies based on context. ADSelfService Plus’ Conditional Access feature helps achieve this. The feature aids organizations in:

  • Implementing access controls without IT administrator intervention.
  • Improving an organization’s security posture without affecting the user experience.

 

 

 

 

For inquiries, email us at info@agdatacom.com

Source: https://www.manageengine.com/products/self-service-password/?pos=Allprod&cat=products&loc=links&prev=AB2