ManageEngine ADSelfService Plus vs Ivanti Password Director
Forgotten passwords and locked-out accounts are two of the main sources of help desk tickets. A self-service password management solution can help reduce such calls to the help desk and improve employee productivity.
ManageEngine ADSelfService Plus and Ivanti Password Director are two solutions that empower end users with self-service password reset and account unlock capabilities thereby helping you reduce help desk calls. This document provides a detailed comparison of these two solutions to help you make an informed purchase decision.
Seven reasons why ManageEngine ADSelfService Plus is better than Ivanti Password Director:
| Single Sign-On (SSO) to enterprise applications: |
|
| Password Synchronization: |
|
| Free Password Expiration Notifier: |
|
| Password Policy Enforcer: |
|
| Windows Logon Two-Factor Authentication (2FA): |
|
| Directory Self-Update and other self-service features: |
|
| MacOS and Linux login agents: |
|
ManageEngine ADSelfService Plus
| Features | Description | ManageEngine ADSelfService Plus Try now |
Ivanti Password Director | ||
|---|---|---|---|---|---|
| Core Self-Service Features | |||||
| Self-Service Password Reset | Users can reset their forgotten passwords on their own. | ||||
| Self-Service Account Unlock | Users can unlock their locked out accounts on their own. | ||||
| Password Expiration Notification | Notify users about their password expiration. | ||||
| Account Expiration Notification | Notify users and their managers about impending account expiration. | ||||
| Password Change Notification | Notify users when their passwords are changed/ reset natively in Windows. | ||||
| Password Synchronizer | Synchronize Windows password changes with on-premise and SaaS applications | *
(Information not available) |
|||
| SSO for Enterprise Applications | Allow users to log in just once using their AD username and password, and gain access to all their enterprise applications. | ||||
| Cached Credentials Update | Help remote users reset passwords and update their cached credentials. | ||||
| Windows logon 2FA | Add an extra layer of security to the local and remote desktop Windows logons. | ||||
| Password Policy Enhancer | Enforce advanced password policy settings such as dictionary rule for improved security. | *
(supports only basic rules) |
|||
| Delegate Password Reset | Lets help desk technicians or users’ managers reset passwords on behalf of the users. | ||||
| Approval Workflow | Get self-service actions of end users approved by managers or IT admins. |
(requires ManageEngine ADManager Plus integration) |
*
(Information not available) |
||
| Employee Directory Self-Update | Employees can update their profile information such as photo and contact number in Active Directory. | ||||
| Self-Service Group Management | Users can become members of AD groups that are assigned to them or their department on their own. | ||||
| Employee Search | Users can search for their colleagues' information. | ||||
| Organization Chart | Users can easily find their position in the organization hierarchy. | ||||
| Change Password | Remote or mobile users can change their domain passwords from anywhere, anytime from a web portal. | ||||
| Automatic Password Reset/Account Unlock | Automatically reset expired passwords and unlock locked out accounts at regular intervals. | ||||
| Accessibility | |||||
| Web and Mobile-based Portal | Users can access the self-service portal from a web or mobile browser | ||||
| Android and iPhone Native Mobile Apps | Android and iPhone apps for ‘on the go’ password reset and account unlock | ||||
| Windows Login Agent | Users can access the self-service password reset portal from the Windows login prompt. | ||||
| Mac Login Agent | Users can access the self-service password reset portal from the macOS login prompt. | ||||
| Linux Login Agent | Users can access the self-service password reset portal from the Linux login prompt. | ||||
| Login Agent Installation | Options to install the login agent in users’ machines. | Push installation (GUI option), GPO, or manual installation. | GPO or manual installation. | ||
| Security | |||||
| Available authentication techniques | Authentication techniques available to verify users’ identities during password reset. |
|
|
||
| CAPTCHA verification | Uses CAPTCHA to verify users during login and self-service password reset processes. | ||||
| Password history support | Option to check password history during password reset. | ||||
| Two-factor authentication for login | Enable TFA for users logging into the self-service portal. | ||||
| Password reset/ account unlock email notifications | Notify users via e-mail & SMS upon successful password reset/change/ account unlock. |
(Notifies via both Email and SMS) |
*
(Information not available) |
||
| Enrollment Options | |||||
| Forced Enrollment | Users can be forced to enroll when they log in to their workstations. | ||||
| Enrollment Reminders | Users can be asked to enroll by sending them enrollment reminders via email. |
(supports both email reminders and push notifications) |
(supports only email reminders) |
||
| Auto Enrollment | Import enrollment data from a CSV file and enroll users without their intervention. | ||||
| Reporting Capabilities | |||||
| Administrator’s Dashboard | Visual dashboard which details all key user related information. | *
(Requires integration with Ivanti Xtraction) |
|||
| User Action Audit Reports | Reports on user actions, their password status and more. | *
(Requires integration with Ivanti Xtraction) |
|||
| Password and Account Status Report | Reports on users with soon-to-expire passwords, locked-out users, and password expired users. | ||||
| Enrollment Status Report | Report on users’ enrollment status. | *
(Requires integration with Ivanti Xtraction) |
|||
| Export Reports | Reports can be saved for later use in various file format such as HTML, PDF, CSV, etc. | *
(Requires integration with Ivanti Xtraction) |
|||
| Reports Scheduler | Scheduler to create and send selected reports via email. | *
(Requires integration with Ivanti Xtraction) |
|||
| Integrations | |||||
| Integration with IAM solutions | Integrates with other solutions to provide comprehensive IAM capabilities. |
(with Ivanti Identity Director) |
|||
| Integration with other applications | Avail self-service password reset & account unlock from other applications. | OWA, SharePoint, Citrix | *
(Information not available) |
||
| Integration with help desk tools | Integrate with help desk ools to automatically create tickets for end users’ selfservice actions. | ||||
| Additional Features | |||||
| Single sign-on to self-service portal | Users are automatically logged in through SAMLbased SSO providers, NTLMv2 authentication, or smart card authentication. |
(doesn’t support smart card authentication) |
|||
| Multi-language support | Built-in support for multiple languages. |
(Supports 17 languages) |
|||
| Rebranding | Customize the self-service portal with your own name, logo, etc. | ||||
| License management | Option to automatically restrict disabled, inactive, expired, and deleted users to save up on licensing cost. | *
(Information not available) |
|||
Can the solution be considered value for money?
The professional version starts at $ 1195 for 500 users.
Conclusion
- Both ADSelfService Plus and Ivanti Password Director offer self-service password reset and account unlock capabilities to clamp down on password-related help desk calls.
- While Ivanti Password Director focuses solely on password management, ADSelfService Plus offers additional self-service features, such as Directory Self-Update, Self-Service Group Management, and Employee Search. Even for self-service password reset, ADSelfService Plus provides login agents for all three major desktop OSs—Windows, macOS, and Linux, forced enrollment option, password reset and change notifications, and more.
- Moreover, Enterprise SSO, Multi-Platform Password Sync, Windows Logon 2FA, and Password Policy Enforcer are all available only in ADSelfService Plus.
- It is very clear that ManageEngine ADSelfService Plus is a much more powerful solution and provides better value than Ivanti Password Director.
Note: This document is for comparative purposes only. All the information mentioned here is based on the readily available information on competitors’ website as on April 10, 2018. The data provided might vary in the actual product.
