ManageEngine ADSelfService Plus vs Ample Logic AD Self Service Tool
The basic purpose of a self-service password management tool is to ensure that endusers have uninterrupted access to their accounts and are entitled to all the password self-service actions. The application should empower them to securely reset passwords and unlock accounts, without helpdesk intervention.
ManageEngine ADSelfService Plus and AmpleLogic AD Self-Service Tool are both designed to meet this requirement. ManageEngine ADSelfService Plus is an integrated Active Directory self-service password management and single sign-on tool. AmpleLogic AD Self-Service tool is a web based solution which allows users to perform password self-service actions.
ManageEngine ADSelfService Plus
| Feature Description | Description | ManageEngine ADSelfService Plus Try now |
AmpleLogic AD Self Service Tool | Remarks | |
|---|---|---|---|---|---|
| Core Features | |||||
| Self-reset Password | Users can reset their forgotten passwords without calling helpdesk | ||||
| Self-unlock Account | Users can unlock their locked out accounts without calling helpdesk | ||||
| Password Expiry Reminder | Notify users to change password before it expires via email | ||||
| Account expiration reminder | Notify users and their managers about impending account expiry | ||||
| Employee directory selfupdate | Employees can update their profile information in Active Directory | ||||
| Multi-platform password synchronizer | Synchronize password and account changes across multiple platforms | ||||
| Real-time password sync agent | Synchronize password changes across a range of cloudbased and onpremise applications in real-time | ||||
| Cached credentials update | Update cached credentials when users reset their passwords even if they are not connected to the corporate network | ||||
| Help Desk assisted password reset and account unlock | Integrate password selfservice with your review and approval based help desk software | ||||
| Mail group subscription | Users can opt-in or opt-out of distribution groups | ||||
| Employee search | Users can search for their colleagues information | ||||
| Organization chart | Users can find their position in the organization hierarchy | Available as a separate tool | |||
| Granular password policy | Enforce custom password policies with varying complexities | ||||
| Change Password | Users can change their password from anywhere, anytime | ||||
| Single sign-on for cloud apps | Single sign-on support for SaaS applications | Available as a separate tool | |||
| Accessibility | |||||
| Web Interface | Users can access the self-service portal from a web browser | ||||
| Mobile Interface | Users can access the self-service portal from a mobile browser | ||||
| Native Android and iPhone apps | Android and iPhone apps for ‘on the go’ password reset and account unlock | ||||
| Windows logon agent (GINA/ CP agent) | Users can access the self-service portal from the Windows login prompt | ||||
| Mac Logon Agent | Users can access the self-service portal from Mac OS X login prompt | ||||
| Security | |||||
| Available authentication techniques | Authentication techniques available to verify users’ identities | Security Q&A, SMS & email verification codes, Google Authenticator, RSA SecurID, RADIUS Authentication, Duo Security | Q&A , SMS verification code | ||
| Password reset and account unlock limit | Limit the number of times a user can reset password and unlock account in a specific time duration | ||||
| Account unlock, password reset & change notifications | Notify users via email, SMS and push upon successful password reset/ change/ and account unlock | ||||
| Password Strength Assessment Tool | Tool to analyze the strength of the passwords in real time as the user types them | ||||
| Enforce Password History during Password Reset | Enforce Active Directory Password History Settings during password reset | ||||
| CAPTCHA Verification | A challenge-response test used to determine whether or not the user is human | ||||
| Block Users | Users who repeatedly fail password selfservice will be automatically blocked for a few minutes | ||||
| Enrollment Options | |||||
| Force enrollment | Users can be forced to enroll when they log in to their system | ||||
| Manual user enrollment | Users can manually enroll after login | ADSelfService Plus also provides the option of notifying users via email and push to enroll | |||
| Import enrollment data | Import enrollment data from a CSV file and enroll users without their intervention | ||||
| Reuse data in Active Directory to automatically enroll users | Reuse data of users from Active Directory to automatically enroll users | ||||
| Reuse enrollment data from your in-house database | Reuse Security Q&A data of users from your inhouse database to enroll user | ||||
| Additional Features | |||||
| Multiple Domain Support | Manage multiple domains from a single window | ||||
| OU and groupbased configuration | Configure features and settings based on OU and Groups | ||||
| NTLM single sign-on for logging in to the self-service portal | Automatically login users with their domain credentials using NTLMv2 authentication | ||||
| Mobile push notification | Notify users about their password status and selfservice actions instantly via push notifications | ||||
| Multi-language support | Support for multiple languages | ||||
| Rebranding | Customize the self-service portal with your own name, logo, etc. | ||||
| Reporting Capabilities | |||||
| Dashboard | Administrator’s dashboard which details all key user related information | ||||
| User action audit reports | Reports on user actions, their password status and more | ||||
| Password and account status report | Complete reports on users, locked out users, soonto-expire password users, and password expired users | ||||
| Enrollment status report | Administrator can check the registered users in the following reports- Enrolled users, NonEnrolled users, Licensed users, Security questions and answers | ||||
| Export reports | Reports can be saved for later use in a target file format such as HTML, PDF, CSV, etc. | ||||
| Reports scheduler | Scheduler to create and send selected reports via email | ||||
Can the solution be considered value for money?
Component-based pricing model
The Standard edition starts at $ 595 for 500 users
The professional version starts at $ 1195 for 500 users.
ADSelfService Plus has an edge over competitors, like AD Self Service Tool, with key features like:
| Automatic enrollment: | Enroll users without their intervention by importing enrollment data like challenge questions and answers, mobile numbers, email ID, etc., from a CSV file or establish a connection with your in-house database which contains users’ enrollment data. You can also force users to enroll by using a logon script. |
| Single sign-on for cloud apps: | Allow users to access all their cloud applications with just their Active Directory credentials. |
| Free password expiration notifier: | Remind users via SMS and email to change their passwords before they expire. This feature is 100% free with no restrictions on user count. |
| Password synchronizer: | Allow users to maintain a single password across all their on-premises and cloud applications. |
| Granular password policy: | Enforce customized granular password policies for different users in the same AD domain. |
| Mobile apps: | Users can manage passwords on the go with mobile apps for Android and iOS. |
| Cached credentials update: | Users can self-reset their passwords securely and also automatically update the cached domain credentials, on their machines, using ADSelfService Plus. |
| GINA/CP/Mac login agents: | Log in agent for GINA/CP and Mac OS X allows users to reset their passwords and unlock their accounts from the log in screen of their machines. |
