FastPass SSPR

Lets employees verify their identity and reset or unlock their own passwords across Active Directory, Entra ID, SAP, Oracle and IBM systems, reducing password calls to the help desk.

Suggest a correction

Overview

FastPass SSPR lets employees reset forgotten passwords, unlock accounts and change passwords themselves after verifying their identity, instead of calling the help desk. Verification can use personal questions, SMS or email codes, authenticator apps, smartcards, Duo, Okta, RSA or approval by a manager, and can vary by user group, network location or time. One portal covers Active Directory, Microsoft Entra ID, SAP, Oracle, IBM i, IBM Z, SQL and LDAP passwords, and it runs on-premises, in FastPass Cloud or as a multi-tenant service for managed service providers.
More product details

Product

Demo Url
fastpasscorp.com/get-demo
Solution Kind
Application
Version
4.0

Who it is for

Organization Types
  • Business
Roles
  • Administrators

Before you choose

Check before choosing

  • Service-account and privileged-account password reset is not a FastPass role.
  • Password synchronization is not possible for Windows passwords controlled by Entra ID/Azure, because the clear-text password cannot be captured at a domain controller.

Features

Password Management

Reset, unlock and change passwords

Password policy indicator and enforcement

More details & conditions: Password Management

Block breached passwords using Have I Been Pwned lists

Customizable prohibited-password list

Password expiration notification

Two-Factor Authentication

Administrator combines two verification types and both must succeed

Configurable for the external network only, for selected user groups or for time intervals

Access Control

Restrict portal access by IP address, country or authorized PC client

Only enabled, authorized Active Directory users can use FastPass

More details & conditions: Access Control

Verification rules by group, location and profile

Categories: Self Service Password Reset

Application Security

IP address restriction

CAPTCHA protection against automated attempts

More details & conditions: Application Security

Account lock after failed verification attempts

Session monitoring

Penetration-tested FastPass V4

Categories: Self Service Password Reset

Self-Service Access Request

Escalate the reset process to managers

Give access to IT systems

More details & conditions: Self-Service Access Request

Manager or colleague approval of password self-service

Categories: Self Service Password Reset

Credential Management

Reset forgotten passwords

Unlock accounts

More details & conditions: Credential Management

Change password using the active password

Enroll users with personal verification data

Password expiration notification

Password Synchronization

Synchronize Active Directory passwords to SAP, Oracle, IBM i, IBM Z, SQL and LDAP systems

Password policy check before synchronization

Not included
  • Synchronization of Windows passwords controlled by Entra ID/Azure
More details & conditions: Password Synchronization

User notification on synchronization failure

Encrypted Password Storage

Questions and answers stored AES-256 encrypted

Optional AES-256 encrypted password storage in the FastPass database for password-history checks

Categories: Password Management

Authentication

Verify users with personal questions and answers

SMS and private email PIN codes

More details & conditions: Authentication

Authenticator app TOTP, smartcard, RSA and code-card verification

Manager or trusted-colleague approval

SAML-based SSO verification

Categories: Password Management

Multi-Factor Authentication

Combine two verification factors, configurable by user group, network location and time interval

TOTP authenticator apps (RFC 6238)

More details & conditions: Multi-Factor Authentication

Duo and Okta push verification (requires the Advanced Authentication feature)

RADIUS, RSA and SAML-based MFA providers

MFA reset

Categories: Password Management

Workflow details

Methods
  • SMS
  • Email
  • Time-based one-time password (TOTP)
  • Authenticator app
  • Mobile push approval
  • SAML
Workflow boundary and exception handling
  • After verifying the caller, the help desk issues a one-time PIN so the user enrolls and resets the password themselves in the portal rather than receiving a bypass.

Technical details

Deployment

Client Channels
  • Browser
  • Desktop app
Client OS
  • Platform
    Windows 10
  • Platform
    Windows 11
  • Platform
    Windows 7
    Limitations
    • Supported only in older versions of the software.
Delivery Models
  • Cloud (SaaS)
  • On premises

Customization

Supported Scopes
  • Branding
  • Workflows

Implementation

Typical Duration
Unit
Weeks
Scope
AD-only implementations (vendor-reported; complex installations with IBM mainframe and SAP can take up to 3 months)
Maximum
2
Minimum
1
Estimate kind
Vendor estimate

Languages & regions

UI Languages
  • en
  • zh
  • cs
  • da
  • nl
  • et
  • fi
  • fr
  • de
  • he
  • hu
  • id
  • it
  • ja
  • ko
  • lv
  • lt
  • no
  • pl
  • pt
  • ru
  • es
  • sv
  • th
  • tr
  • cy

Security

Assurances
  • Kind
    Certification
    Scope
    FastPass cloud operations
    Standard
    Cyber Essentials Plus
  • Kind
    Assessment
    Scope
    FastPass V4 penetration test
    Standard
    Penetration test by Backbone Security
  • Kind
    Self declaration
    Scope
    FastPass version 4.0 and later (Windows client, server and domain controller components); AES-256 encryption and PBKDF hashing
    Standard
    FIPS 140-2
Encryption At Rest
Yes
Encryption In Transit
Yes
MFA Methods
  • Authenticator app
  • SMS
  • Email
  • Mobile push approval
SSO Protocols
  • SAML

Reviews

User experiences, moderated before publication. Review policy

Write a review

No reviews yet.

Be the first to share your experience with FastPass SSPR.

Add a product

Search to find a product.

Privacy choices

Choose what to allow.

You can change your choice here at any time. Refusing optional analytics does not limit the catalog.

AdvertisingAdSense is not currently enabled. Advertising choices will be available through its consent platform before ads are activated.Not active

Cookie details · Privacy rights