Pricing  Get Quote
 
 

How to enable Partial Enrollment for Active Directory users in ADSelfService Plus

Active Directory domain users need to complete enrollment with ADSelfService Plus before they can use the below listed features:

  1. Self-service password reset
  2. Self-service account unlock
  3. Endpoint multi-factor authentication
  4. ADSelfService Plus' logon multi-factor authentication

Only after enrollment, the product can verify users' identities using any or all of the enforced authentication techniques.

Enrollment status of users in ADSelfService Plus

If all the below conditions are satisfied, users are considered Enrolled, else, they are Partially Enrolled.

  1. Condition 1: The user should have enrolled for all the mandatory authenticators.

    onboarding-using-partial-enrollment-1

  2. Condition 2: The user should have enrolled for the required number of authenticators for enabling the password reset and account unlock features.

    onboarding-using-partial-enrollment-2

  3. Condition 3: If Security Question and Answer is configured as the authenticator, the user should have enrolled by answering the required number of questions as well as all the mandatory questions.

    onboarding-using-partial-enrollment-3

Only the users who have satisfied all the above three conditions are deemed enrolled, and can perform self-service password reset and account unlock. For the partially enrolled users (say, users have enrolled for 2 out of 4 authentication methods), ADSelfService Plus allows them to initiate the self-service password reset/account unlock action and complete the enrollment during the identity verification stage.

How to enable partially enrolled users to perform password self-service

  1. Go to Configuration → Self-Service → Multi-factor Authentication.
  2. Click Advanced.

    onboarding-using-partial-enrollment-4

  3. In the Reset/Unlock tab, unselect the Deny users from performing password reset/account unlock when partially enrolled option.
  4. Click Save.

Important: Users cannot enroll for ADSelfService Plus mobile app-based authenticators during the identity verification stage.

 

Request Support

Need further assistance? Fill this form, and we'll contact you rightaway.

Highlights

Password self-service

Free Active Directory users from attending lengthy help desk calls by allowing them to self-service their password resets/ account unlock tasks. Hassle-free password change for Active Directory users with ADSelfService Plus ‘Change Password’ console. 

One identity with Single sign-on

Get seamless one-click access to 100+ cloud applications. With enterprise single sign-on, users can access all their cloud applications with their Active Directory credentials. Thanks to ADSelfService Plus! 

Password/Account Expiry Notification

Intimate Active Directory users of their impending password/account expiry by mailing them these password/account expiry notifications.

Password Synchronizer

Synchronize Windows Active Directory user password/account changes across multiple systems, automatically, including Office 365, G Suite, IBM iSeries and more. 

Password Policy Enforcer

Ensure strong user passwords that resist various hacking threats with ADSelfService Plus by enforcing Active Directory users to adhere to compliant passwords via displaying password complexity requirements.

Directory Self-UpdateCorporate Search

Portal that lets Active Directory users update their latest information and a quick search facility to scout for information about peers by using search keys, like contact number, of the personality being searched.

ADSelfService Plus trusted by

A single pane of glass for complete self service password management