Starting and Accessing ADSelfService Plus

In this section, we will be looking at the multiple ways to start and access ADSelfService Plus: 

1. Starting ADSelfService Plus

2. Accessing the ADSelfService Plus Client

3. Accessing ADSelfService Plus from the native logon screen

4. Accessing ADSelfService Plus from mobile devices

5. Stopping ADSelfService Plus

1. Starting ADSelfService Plus

Recommendation:

• Exempt ADSelfService Plus from the anti-virus deployed in your environment so it is not flagged by mistake.

When ADSelfService Plus is installed as a Service

ADSelfService Plus is started using the system account when run as service.

To start ADSelfService Plus as a service:

• Click on Start. 
• Search for Services.
• Alternatively, you can open the Run window, type services.msc and click OK.
• In the Services tab that appears choose ManageEngine ADSelfService Plus.
• Select the Start the service option on the left side.
• Click on Start again. Go to ADSelfService Plus and click on Start ADSelfService Plus.

When ADSelfService Plus is not installed as a Service

  In this case, ADSelfService Plus is started using the user account. To start it, go to Start → Programs → ADSelfService Plus → Start ADSelfService Plus. On starting ADSelfService Plus, the client is automatically launched in the default browser.

You should unblock these programs to start ADSelfService Plus

Fig: Java Alert

2. Accessing the ADSelfService Plus client

Once the product is started using the Start ADSelfService Plus option, the ADSelfService Plus client is automatically launched in the web browser. The client can also be accessed by clicking on the desktop icon when installed as an application or a service. To access ADSelfService Plus client manually:

3. Accessing ADSelfService Plus from the native logon screen

• ADSelfService Plus can also be accessed right from the logon screen of the end-user Windows, macOS and Linux machines, so users can reset their passwords or unlock their accounts without having to use someone else's machine.
• To access ADSelfService Plus from the logon screen, deploy the ADSelfService Plus login agent on the users' machines. It will extend the Windows, macOS and Linux logon dialog screen with the self-service (password reset and account unlock) functionality as shown in the image below:

Fig: ADSelfService Plus Credential Provider for Windows 7

Fig: ADSelfService Plus Credential Provider for Windows 10

For further info, refer GINA/Mac/Linux Installation.

4. Accessing ADSelfService Plus from mobile devices

To make the password self-service process easier for end users, and to prevent them from depending on other users' computers and the ADSelfService Plus login agent, ADSelfService Plus offers a native app for iOS & Android and also a mobile web app for other platforms.

You can download the iOS app from the App Store and the Android App from the Play Store. The mobile web app can be accessed from mobile web browsers like Google Chrome.

Setting up the iOS and Android Apps

Before users can start using the app for password self-service, they have to configure the server settings so that the app can connect and communicate with the ADSelfService Plus server in your organization.

ADSelfService Plus mobile app can be configured in three ways:

1. Manual configuration by user
2. Configuration via QR code
3. Configuration via Mobile app deployment feature

i. Manual configuration by user:

To configure their ADSelfService Plus mobile app manually, users have to perform the following steps:

• Open ADSelfService Plus mobile app
• Tap Server Settings
• In the Server Settings page, enter the Server Name or IP Address of the server in which ADSelfService Plus is running
• Enter the Port number
• Enable SSL if necessary by sliding the ‘Protocol’ toggle to HTTPS
• Tap Save to finish

ii. Configuration via QR code:

To automatically configure the ADSelfService Plus mobile app via QR code, users have to follow these steps:

• Open the ADSelfService Plus Mobile App and tap the Server Settings link on the home screen.
• In the bottom-left corner, tap the Scan QR Code link on the home screen.
• Open the web browser and login to the self-service portal. (You can also click on either the Reset Password or Unlock account button).
• Click the Mobile Access button.
• Scan the QR code included in the pop up using your ADSelfService Plus Mobile App to configure the server settings automatically.

iii. Configuration via Mobile App Deployment feature (Only for iOS):

The Mobile app deployment feature of ADSelfService Plus lets you remotely install and the ADSelfService Plus mobile app on the mobile devices of users. For this, the first step is to install MDM profiles in these devices. The next step is to install the mobile app on these devices remotely and configure the server settings.

• Log in to ADSelfService Plus.
• Click Configuration -> Administrative Tools -> Mobile App Deployment.
• Select your domain and click Configured Devices.
• Select the mobile devices to install the ADSelfService Plus mobile app.
• Select the Install and configure app option.
• Click Install to install and configure the mobile app on the selected devices automatically.

Note:
• The following values will be used for configuring the server
  • Server name : The host name provided in the certificate issued by your Certificate Authority.
  • Port number : Port in which ADSelfService Plus is running.
  • Protocol : HTTPS

• Furthermore, you can also use other MDM tools like AirWatch and Mobile Device Manager Plus to configure ADSelfService mobile app for users. While using other MDM tools, use the following keys as parameters or property values
  • serverName(e.g. demo.adselfserviceplus.com)
  • serverPort(e.g. 443)
  • serverProtocol(e.g. https)

Launching the Mobile Web App:

The Mobile Web App can be launched from the web browser of any mobile device. To access ADSelfService Plus' Mobile Web App:

• Open a web browser from the mobile device.
• Type the URL of ADSelfService Plus portal. For eg: Enter http://<hostname>:8888 in the address bar of the mobile browser. Here hostname refers to the machine where ADSelfService Plus is running and 8888 denotes the port number.

• Reset Password

• Unlock Account

• Change Password

• Enrollment

• Push Notification

5. Stopping ADSelfService Plus

• To stop ADSelfService Plus, select Start → Programs → ADSelfService Plus → Stop ADSelfService Plus
• To stop ADSelfService Plus when installed as a service:
  1. Click on Start. 
  2. Search for Services. 
  3. Alternatively, you can open the Run window, type services.msc and click OK.
  4. In the Services tab that appears choose ManageEngine ADSelfService Plus.
  5. Select the Stop the service option on the left side.