ADSelfService Plus

Lets IT teams protect Active Directory and Entra ID sign-ins with multi-factor authentication and single sign-on, while users reset passwords and unlock accounts themselves.

Suggest a correction

Overview

Users reset forgotten passwords and unlock accounts for Active Directory, Entra ID and connected cloud apps from a web portal, the Windows, macOS or Linux login screen, or the mobile app, after verifying their identity with multi-factor authentication. Administrators enforce MFA on machines, VPNs, Outlook on the web, RDP and enterprise applications, set conditional access by IP address, device, time and location, and apply password policies that block dictionary words, patterns and breached passwords. Real-time password synchronization and single sign-on keep one identity across applications. Login-screen reset, conditional access, cached-credential updates, SSO and most endpoint MFA require the Professional edition; the Standard edition covers web-based self-service, MFA for resets, expiry notifications, policy enforcement and password sync.
More product details

Product

Demo Url
manageengine.com/products/self-service-password/simulation/adselfservice-plus-self-service-password-reset-demo.html
Documentation
manageengine.com/products/self-service-password/help/admin-guide/gettingstarted/getting-started.html
License Model
Proprietary
Solution Kind
Application

Who it is for

Roles
  • Administrators

Images

Before you choose

Check before choosing

  • Several features, such as web-based account unlock, macOS and Linux login-screen reset and cached credentials update, apply only to Active Directory environments.
  • The SMS add-on uses the Clickatell gateway and cannot send SMS to US numbers.

Features

Password Management

Self-service password reset and change

Password policy enforcement during resets

What you need
None listed
More details & conditions: Password Management

Password expiry notifications

Categories: Self Service Password Reset

Two-Factor Authentication

Two-factor verification for self-service password resets and account unlocks

What you need
None listed

Categories: Self Service Password Reset

Access Control

Conditional access by IP address, device, time and geolocation to allow, challenge or block self-service requests

What you need
  • Professional edition

Categories: Self Service Password Reset

Self-Service Access Request

Self-service AD group subscription to opt in or out of groups

Approval-based workflow routing self-service requests to the help desk

What you need
None listed

Categories: Self Service Password Reset

Credential Management

Self-service password reset and account unlock for Active Directory, Entra ID and cloud accounts

Forced and bulk user enrollment

What you need
  • Cached credentials update requires the Professional edition
More details & conditions: Credential Management

Cached credentials update after remote reset

Categories: Self Service Password Reset

Password Synchronization

Real-time synchronization of password resets and changes across enterprise applications and machines

What you need
None listed

Categories: Self Service Password Reset

Access Management

Conditional access policies by IP address, device, time and geolocation

Separate MFA and access rules per OU and AD group

What you need
  • Conditional access requires the Professional edition
More details & conditions: Access Management

Stricter MFA for privileged account groups

Categories: Multi Factor Authentication

Authentication

MFA at Windows, macOS and Linux logons

MFA for VPN, Outlook on the web, RDP and enterprise applications

What you need
  • Endpoint and application MFA require the Professional edition; Endpoint MFA is licensed separately beyond 10 users
More details & conditions: Authentication

Passwordless login for enterprise applications

Categories: Multi Factor Authentication

Two-Factor Authentication

Two-factor authentication for Windows interactive and RDP logins

Two-factor prompts for Windows UAC elevation

What you need
  • Professional edition for Windows endpoint MFA

Categories: Multi Factor Authentication

Multiple Authentication Methods

20 authenticators including TOTP apps, push, FIDO passkeys, YubiKey, biometrics, smart cards, SMS, email, Duo Security and RSA SecurID

What you need
  • Professional edition for all 20 authenticators; Standard edition offers 8

Categories: Multi Factor Authentication

Secure Login

MFA on machine, VPN, Outlook on the web and application sign-ins

Offline MFA for Windows and macOS logins

What you need
  • Professional edition

Categories: Multi Factor Authentication

Mobile Authentication

Push, QR code, biometric (fingerprint or face) and TOTP authentication through the ADSelfService Plus Android and iOS app

What you need
  • Professional edition

Categories: Multi Factor Authentication

Show all details (19)

Multi-Factor Authentication

MFA for self-service password resets and account unlocks

MFA for machine, VPN, Outlook on the web, RDP and application logins

What you need
  • Standard edition offers 8 authenticators; Professional offers 20
More details & conditions: Multi-Factor Authentication

Adaptive MFA driven by conditional access

Categories: Multi Factor Authentication

Password Management

Self-service password reset and change

Password policy enforcement with dictionary, pattern and breached-password checks

What you need
  • Policy enforcement in the Windows Change Password screen and ADUC requires the Professional edition
More details & conditions: Password Management

Password expiry notifications

Real-time password synchronization

Categories: Password Management

Credential Management

Self-service password reset and change

Self-service account unlock

What you need
  • Cached credentials update requires the Professional edition
More details & conditions: Credential Management

Password and account expiry notifications by email, SMS and push

Cached credentials update after remote reset

Categories: Password Management

Authentication

MFA identity verification before password reset and account unlock

MFA-backed web portal for domain password change

What you need
None listed

Categories: Password Management

Password Synchronization

Real-time sync of AD password resets and changes to Microsoft 365, Google Workspace, Salesforce, Oracle DB, MS SQL, IBM iSeries, OpenLDAP and other systems

Account unlocks synced to linked accounts

What you need
None listed
More details & conditions: Password Synchronization

OU-, group- and domain-based control of sync operations

Categories: Password Management

Multi-Factor Authentication

MFA for self-service password resets and account unlocks

MFA for ADSelfService Plus portal logins

What you need
None listed

Categories: Password Management

Two-Factor Authentication

Two-factor verification for password resets, account unlocks and portal logins

What you need
None listed

Categories: Password Management

Workflow details

Methods
  • Time-based one-time password (TOTP)
  • Passkey
  • Security key
  • Mobile push approval
  • Recovery codes
  • SMS
  • Email
  • Authenticator app
Recovery
  • Account unlock
  • Help desk approval workflow
  • Recovery codes
Policies
  • device
  • Time of access
  • geolocation

Pricing

Free EditionFree option

Free

Free

Price Tiers
  • Unit
    domain users
    Unit price
    Amount
    0
    Currency
    USD
    Calculation
    Flat band
    Lower bound
    1
    Upper bound
    50

Plan details & limits

Business Model
  • Free
Limits
  • Domain users

    50domain users

    Conditions
    Includes all Standard edition features; Standard Endpoint MFA is included for 10 users. The free edition never expires.

Standard Edition

USD 595 / flat fee / yearBilled annually

USD 595 / flat fee / year

Billed annually

Add On Fees
  • Failover and Secure Gateway Services add-on

    USD 395

  • Endpoint MFA (Standard edition)

    USD 495

    Price basis
    Annual subscription fee for 500 users
  • Name
    SMS add-on
Price Tiers
  • Unit
    domain users
    Unit price
    Amount
    595
    Currency
    USD
    Calculation
    Flat band
    Lower bound
    1
    Upper bound
    500
  • Unit
    domain users
    Unit price
    Amount
    1,195
    Currency
    USD
    Calculation
    Flat band
    Lower bound
    501
    Upper bound
    1,000
  • Unit
    domain users
    Unit price
    Amount
    1,745
    Currency
    USD
    Calculation
    Flat band
    Lower bound
    1,001
    Upper bound
    1,500
  • Unit
    domain users
    Unit price
    Amount
    2,195
    Currency
    USD
    Calculation
    Flat band
    Lower bound
    1,501
    Upper bound
    2,000
  • Unit
    domain users
    Unit price
    Amount
    3,145
    Currency
    USD
    Calculation
    Flat band
    Lower bound
    2,001
    Upper bound
    3,000
  • Unit
    domain users
    Unit price
    Amount
    4,995
    Currency
    USD
    Calculation
    Flat band
    Lower bound
    3,001
    Upper bound
    5,000
Trial Auto Charge
No
Trial Available
Yes
Trial Card Required
No
Trial Days
30
Trial is free
Yes

Plan details & limits

Business Model
  • Subscription
Limits
  • Users with included Endpoint MFA

    10users

Professional Edition

USD 1,195 / flat fee / yearBilled annually

USD 1,195 / flat fee / year

Billed annually

Add On Fees
  • Failover and Secure Gateway Services add-on

    USD 395

  • Endpoint MFA (Professional edition)

    USD 995

    Price basis
    Annual subscription fee for 500 users
  • Name
    SMS add-on
Price Tiers
  • Unit
    domain users
    Unit price
    Amount
    1,195
    Currency
    USD
    Calculation
    Flat band
    Lower bound
    1
    Upper bound
    500
  • Unit
    domain users
    Unit price
    Amount
    2,195
    Currency
    USD
    Calculation
    Flat band
    Lower bound
    501
    Upper bound
    1,000
  • Unit
    domain users
    Unit price
    Amount
    2,895
    Currency
    USD
    Calculation
    Flat band
    Lower bound
    1,001
    Upper bound
    1,500
  • Unit
    domain users
    Unit price
    Amount
    3,495
    Currency
    USD
    Calculation
    Flat band
    Lower bound
    1,501
    Upper bound
    2,000
  • Unit
    domain users
    Unit price
    Amount
    4,695
    Currency
    USD
    Calculation
    Flat band
    Lower bound
    2,001
    Upper bound
    3,000
  • Unit
    domain users
    Unit price
    Amount
    6,995
    Currency
    USD
    Calculation
    Flat band
    Lower bound
    3,001
    Upper bound
    5,000
Trial Auto Charge
No
Trial Available
Yes
Trial Card Required
No
Trial Days
30
Trial is free
Yes

Access in this plan

MFA Methods
  • Authenticator app
  • Passkey
  • Security key
  • Mobile push approval
  • Recovery codes
  • SMS
  • Email

Plan details & limits

Business Model
  • Subscription
Limits
  • Users with included Endpoint MFA

    10users

Technical details

Deployment

Client Channels
  • Browser
  • Desktop app
  • Mobile app
Client OS
  • Platform
    Windows
    Supported tasks
    • Password reset from the login screen, and MFA at sign-in and RDP (Professional edition).
  • Platform
    macOS
    Supported tasks
    • Password reset from the login screen and MFA at sign-in (Professional edition).
  • Platform
    Linux
    Supported tasks
    • Password reset from the login screen and MFA at sign-in (Professional edition).
  • Platform
    Android and iOS
    Supported tasks
    • Self-service password reset and account unlock through the mobile app.
Delivery Models
  • On premises

Implementation

Delivery Mode
  • Self service

Data

Export Formats
  • CSV
  • PDF
Import Formats
  • CSV

Customization

Supported Scopes
  • Branding

Security

Audit Events
  • Sign-in attempts
Provisioning
  • SCIM
SSO Protocols
  • SAML
  • OpenID Connect

Reviews

User experiences, moderated before publication. Review policy

Write a review

No reviews yet.

Be the first to share your experience with ADSelfService Plus.

Add a product

Search to find a product.

Privacy choices

Choose what to allow.

You can change your choice here at any time. Refusing optional analytics does not limit the catalog.

AdvertisingAdSense is not currently enabled. Advertising choices will be available through its consent platform before ads are activated.Not active

Cookie details · Privacy rights