is an identity security solution with

adaptive MFA, SSO, and password

management capabilities

Give end users the right amount of independence and eliminate

more than a quarter of your help desk tickets.

Highlights

Employ MFA to secure endpoint logins, cloud application logins, and self-service password reset and
account unlock.
Give end users one identity to easily access all their enterprise applications through single sign-on (SSO)
and just-in-time (JIT) provisioning.
Empower end users to perform password reset and account unlock without compromising on security.
Deliver fully customizable and automated password and account expiration notifications periodically to
end users.
Enforce a multi-platform, granular password policy with customizable rules, including the dictionary rule
and Have I Been Pwned integration.
Allow end users to update their personal details in AD and perform comprehensive corporate directory
searches.

The challenge
Securing and managing user identities can be a real challenge in the modern-day hybrid workplace. Both on-premises and
remote users access the enterprise network through various endpoints, and every single access attempt has to be
scrutinized. Care must be taken to ensure that users have streamlined access to all enterprise resources at anytime. It would
be ideal to have a single solution to address all these requirements.

Introducing ADSelfService Plus

ManageEngine ADSelfService Plus is an identity security solution to ensure secure and seamless access to enterprise
resources and to establish a Zero Trust environment. With capabilities such as adaptive MFA, SSO, password management
and security, and workforce self-service, ADSelfService Plus provides your workforce secure, frictionless access to resources.
The solution helps block identity-related threats, reduce password-related help desk tickets, fast-track application
onboarding, and empower remote workforce with secure access to the resources they need.

ADSelfService Plus is a tool that we consider indispensable. It is the right

tool for the job. Any company that relies on Active Directory
authentication with password expiry will benefit from using it.

Chris Jackson
Systems administrator, TXP Corporation
 Core features

Adaptive MFA Workforce self-service

MFA: Protect access to machines (Windows, macOS, and Linux), VPNs, Directory self-update: Maintain accurate
OWA, and enterprise applications with MFA by choosing from over 20 and up-to-date directory information by
methods, including FIDO2 authenticators, biometrics, TOTP, and allowing end users to update their own
third-party apps like YubiKey Authenticator and Microsoft attributes, such as their email address,
Authenticator. mobile number, and photograph, in AD.

Conditional Access: Automate access control to organizational Corporate directory search: Enable
resources via context-based authentication using details like IP employees to easily search for users,
address, time of access, geolocation, and device used. contacts, or groups in your organization.

SSO Email group subscription: Define group

subscription policies and allow users to
Enterprise SSO: Integrate enterprise applications with your
opt in or out of selected distribution
organization's AD to give users the convenience of accessing any
groups when their role changes, without
application by logging in just once with their credentials.
help desk intervention.

Passwordless login: Thwart credential-based attacks by employing

passwordless authentication, backed by MFA for enterprise application
logins.
Supplementary features
JIT provisioning
Predefined reports: Run audit
SCIM-based provisioning: Automate user provisioning in the
integrated applications immediately when users log in, streamlining reports to keep track of users'
and simplifying the user onboarding process. identity verification attempts,
self-service actions, and password
and account status.
Self-service password management and security
Password self-service: Empower end users to perform secure
Integrations: Extend the product's
password reset and account unlock without help desk intervention.
capabilities by integrating with
SIEM, ITSM, and IAM solutions.
Real-time password synchronizer: Synchronize AD passwords with
enterprise applications in real time, and enable users to switch
smoothly between various cloud services and on-premises systems Mobile password management:
with a single password. Perform self-service actions on the
go using the ADSelfService Plus
Password policy enforcer: Customize fine-grained password policies Android or iOS mobile application.
at the OU and group level for different users across AD and other
enterprise platforms.

Remote work enablement

Cached credentials update: Enable automatic update of users'
% F R EE
domain password changes in their devices' cached credentials via 100 SERS0U
VPN.
FOR 5
Web-based domain password change: Offer a secure web-based
portal for remote employees to change domain and enterprise
application passwords.

Password and account expiry notification: Remind on-premises and

remote users about their impending password and account expiration
via SMS, email, or push notifications.

Pricing starts at
Download 30-day, FREE trial
$
595 with no restrictions!
Download now

Specifications: Contact us at:

Processor: 2.4 GHz | RAM: 8GB | Disk Space: 100GB (SSD preferred) Website: www.adselfserviceplus.com
Supported platforms: Windows 2022, Windows Server 2019, Windows Server 2016,
Live demo: demo.adselfserviceplus.com
Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2, Windows
Server 2008, Windows Server 2003, Windows Server 2000, Windows 11, Windows 10, Sales questions: [email protected]
Windows 8.1, Windows 8, Windows 7, and Windows Vista and Windows XP. Tech support: [email protected]
Supported browsers: Internet Explorer 9 and above; Firefox 4 and above; Chrome 10 and Toll-free: +1.844.245.1104
above; Microsoft Edge.
Supported databases: PostgreSQL (default), and MS SQL.