It is a common practice for admins to enforce timely password changes and stringent password policies to ensure organizational network security. However, these security measures can adversely affect productivity when users forget their login passwords, causing frequent AD account lockouts.
ADSelfService Plus, an identity security solution with MFA, SSO, and password management capabilities, provides a self-service account unlock tool that allows local and remote users to unlock AD accounts and other cloud accounts without help desk assistance.
ADSelfService Plus enables users to unlock their Microsoft, Google Workspace, or AD accounts from any location!
Allow users to unlock accounts from their Windows, macOS, and Linux login screens.Learn more
Empower users to unlock their accounts from their Android and iOS devices. Learn more
Grant users the ability to update their local cached credentials after unlocking their AD accounts remotely. Learn more
Enable users to unlock their AD and cloud accounts securely using ADSelfService Plus' web browser.
ADSelfService Plus allows admins to trigger a preconfigured authentication workflow once users initiate an account unlock. It comprises 20 different authentication techniques, including FIDO passkeys, biometrics, and YubiKey, which can be utilized to authenticate users during self-service account unlocks. ADSelfService Plus ensures the protection of confidential data by allowing admins to enforce different types of authentication techniques for different users based on their level of access to sensitive business data.
The following are some MFA methods that ADSelfService Plus supports to authenticate user identities:
The following are some MFA methods that ADSelfService Plus supports to authenticate user identities during account unlock:
For the complete list of supported authenticators, click here.
FIDO passkeys
Biometric authentication
YubiKey Authenticator
Duo Security
Google Authenticator
TOTPs
The conditional access policies offered by ADSelfService Plus enable admins to configure context-based rules to step-up or step-down the authentication flow for self-service account unlock. These authentication factors can be altered based on various factors, such as the IP address, time of request, device used, and the geolocation of the user. In a scenario where an account unlock request is received from an untrusted IP address, the user can be asked to complete additional factors of identity verification, with biometrics being a mandatory verification factor.
ADSelfService Plus supports the following user directories for self-service account unlock.
ADSelfService Plus empowers your end users to unlock their own accounts right from their login screens, freeing IT admins from these routine account unlock queries.
How much money can you save using a password reset and account unlock tool?
Calculate your ROI hereADSelfService Plus requires users to complete MFA enrollment before they can use the account unlock tool. To ensure 100% user enrollment, ADSelfService Plus enables IT admins to:
Users no longer have to depend on the help desk's availability to unlock their locked out accounts. This means both users and IT admins don't lose their productivity because of account lockouts.
Lighten the burden for IT admins by enabling users to unlock their own locked out account at any time of day.
ADSelfService Plus delivers benefits on the day it's installed by resolving workforce downtime issues and reducing incurred IT costs due to account lockouts.
Monitor the status of users' account lockouts with the help of detailed reports. Moreover, ADSelfService Plus makes collecting data for legal auditing easy.
Enable context-based MFA with 19 different authentication factors for endpoint and application logins.
Learn moreAllow users to access all enterprise applications with a single, secure authentication flow.
Learn moreEnhance remote work with cached credential updates, secure logins, and mobile password management.
Learn moreEstablish an efficient and secure IT environment through integration with SIEM, ITSM, and IAM tools.
Learn moreDelegate profile updates and group subscriptions to end users and monitor these self-service actions with approval workflows.
Learn moreCreate a Zero Trust environment with advanced identity verification techniques and render your networks impenetrable to threats.
Learn more