Feature highlights

Here are the features offered by ADSelfService Plus:

Adaptive MFA

• MFA for workstations, servers, VPN, RDP, and cloud apps
• MFA for peripheral access points like Microsoft UAC prompts and machine unlocks
• Automated conditional access into the enterprise network and its resources

Single sign-on

• Out-of-the-box SSO for hundreds of enterprise applications
• Custom SSO to any SAML, OIDC, and OAuth-based on-premises or cloud application
• Advanced passwordless authentication into cloud applications

Self-service password management and security

• Self-service password reset and account unlock from web browsers, system login screens, and mobile devices
• Customizable advanced password policies for password resets and changes
• Password and account expiration alerts via SMS, email, and push notifications
• Password synchronization between AD and enterprise applications

Remote work enablement

• Cached credentials update of self-service password resets via VPN
• Secure web-based portal for AD and enterprise application password changes
• Dedicated mobile app for self-service actions and password changes

Workforce self-service

• Directory self-update
• Self-service group subscription
• Employee search
• Organization chart
• Approval-based workflow for self-service actions

Enrollment and non-enrollment features

User enrollment is required for end users to access the below ADSelfService Plus features:

• Adaptive MFA
• Self-service password reset and account unlock

User enrollment is not required to access the following features:

• Single sign-on (when not protected by MFA)
• Advanced password policies
• Password and account expiration alerts
• Web-based password change
• Directory self-update
• Self-service group subscription
• Employee search
• Organization chart

Learn more about enrollment here.