Self-service account unlock tool for Active Directory and cloud applications

Admins usually enforce timely password changes and stringent password complexity policies to ensure organizational network security. However, these security measures can adversely affect user productivity when users forget their login passwords, causing frequent AD account lockouts.

ADSelfService Plus, a self-service account unlock tool, allows local and remote users to unlock their Windows AD and cloud accounts on their own.

24/7 self-service options for locked-out user accounts

Be it a locked-out Google Workspace account or an Active Directory account, ADSelfService Plus enables users to unlock their accounts, regardless of whether they're in the office, on the move, or at home.

Stringent multi-factor authentication techniques (MFA) to secure account unlocks

ADSelfService Plus allows admins to initiate a preconfigured authentication workflow once users initiate account unlock. It comprises of 19 different authentication techniques, including biometrics and YubiKey, which can be utilized to authenticate users during self-service account unlock. ADSelfService Plus ensures the protection of confidential data. Sensitive business data being maintained by some users would be at risk if their accounts are cracked by a malicious hacker. ADSelfService Plus provides the option to enforce various authentication types for different types of users.

The following are some MFA methods that ADSelfService Plus supports to authenticate user identities:

Risk-based password policy to enhance security

The conditional access policy offered by ADSelfService Plus enables admins to set context-based rules to step-up or step-down the authentication flow set for self-service account unlock. These authentication factors can be altered based on various factors such as the IP address, time of request, device used, and the geolocation of the user. In a scenario where an account unlock request is received from an untrusted IP address, the user can be asked to pass three different factors of identity verification, with the mandatory verification factor being a biometric factor.

Supported platforms for self-service account unlocks

ADSelfService Plus supports user directories including:

• Active Directory
• OpenLDAP
• AD LDS
• Google Workspace
• G Suite
• MS SQL
• Salesforce
• Microsoft 365
• AS400
• HP UX
• Oracle DB and more
• Oracle DB
• and more.

Identity verification in ADSelfService Plus for self-service account unlock

ADSelfService Plus analyzes user risk factors and ensures that users prove their identity via the enforced authenticators before allowing them to unlock their account. Admins can allow or restrict access based on a user's:

• Source IP address
• Device type used
• Time of access
• Source location of the access request

Admins can also enforce MFA methods to self-service account unlock actions based on users' domains, organizational units, or group memberships.

Ensure 100% user enrollment for self-service account unlock

ADSelfService Plus requires users to complete enrollment before they can use the account unlock tool. To ensure 100% user enrollment, ADSelfService Plus enables IT admins to:

• Notify users to enroll for password self-service via email and push notifications.
• Force users to enroll when they log in to their machines with a persistent pop-up on their desktop.
• Utilize users' existing Active Directory information for enrollment.
• Automatically enroll users by importing enrollment data from CSV files or an external database.

Learn more about enrollment.

Benefits of ADSelfService Plus