Feature highlights
Here are the features offered by ADSelfService Plus:
Adaptive MFA
- MFA for workstations, servers, VPN, RDP, and cloud apps
- MFA for peripheral access points like Microsoft UAC prompts and machine unlocks
- Automated conditional access into the enterprise network and its resources
Single sign-on
- Out-of-the-box SSO for hundreds of enterprise applications
- Custom SSO to any SAML, OIDC, and OAuth-based on-premises or cloud application
- Advanced passwordless authentication into cloud applications
Self-service password management and security
- Self-service password reset and account unlock from web browsers, system login screens, and mobile devices
- Customizable advanced password policies for password resets and changes
- Password and account expiration alerts via SMS, email, and push notifications
- Password synchronization between AD and enterprise applications
Remote work enablement
- Cached credentials update of self-service password resets via VPN
- Secure web-based portal for AD and enterprise application password changes
- Dedicated mobile app for self-service actions and password changes
Workforce self-service
- Directory self-update
- Self-service group subscription
- Employee search
- Organization chart
- Approval-based workflow for self-service actions
Enrollment and non-enrollment features
User enrollment is required for end users to access the below ADSelfService Plus features:
- Adaptive MFA
- Self-service password reset and account unlock
User enrollment is not required to access the following features:
- Single sign-on (when not protected by MFA)
- Advanced password policies
- Password and account expiration alerts
- Web-based password change
- Directory self-update
- Self-service group subscription
- Employee search
- Organization chart
Learn more about enrollment here.