ADSelfService Plus Knowledge Base
Filtered by
Installation and configuration
Installation and uninstallation
Deploying ADSelfService Plus
- How to configure ADSelfService Plus to run on a specific IP address
- How to configure high availability in Azure using a load balancer
- Configuring high availability in ADSelfService Plus
- Configuring ADSelfService Plus in Microsoft Entra application proxy
- How to deploy ADSelfService Plus over the internet
- Prevent the ADSelfService Plus URL from being listed in search engines
- ManageEngine ADSelfService Plus’ shared responsibility model
Starting and accessing ADSelfService Plus
License application
Domain configuration
Database and server migration
- How to migrate ADSelfService Plus with an external Microsoft SQL server
- How to automatically backup the ADSelfService Plus database
- How to migrate external PostgreSQL server keeping the ADSelfService Plus server intact
- How to handle database connection failures in ADSelfService Plus
- How to manually backup and restore the database in ADSelfService plus in same application instance
- How to migrate a Microsoft SQL database to a new database server
- How to automatically back up the ADSelfService Plus database
- Migration from PostgreSQL database server to MS SQL
- Configuring MS SQL using Group Managed Service Account (gMSA) or Managed Service Account (MSA)
- How to migrate the ADSelfService Plus installation from one machine to another
- Migrating from ADSelfService Plus 32-bit to ADSelfService Plus 64-bit
Policy configuration
- ADSelfService Plus self-service password reset configuration part II
- ADSelfService Plus self-service password reset configuration part I
- Group & OU-based self-service policy configuration
- How does ManageEngine ADSelfService Plus handle passwords
- How to automate Active Directory password reset and account unlock
- How to clone existing policies in ADSelfService Plus
- Encryption and data storage in ADSelfService Plus database
- Setting limits for password reset and account unlock actions
Reports and auditing
Self-service
Self-service
- ADSelfService Plus valid user identification
- SMS and email verification codes
- How to enable users to reset passwords and account unlocks in Azure AD
- Chromebook configuration steps
- Remote password management: How to allow users to change expired passwords when outside the domain network and cannot log in to RDP
- Self-service password reset for Windows 7,8, and 10
- How to reset an administrator password in Windows
- Verify users' identities using SAML-based identity providers during self-service password reset and account unlock
- Troubleshooting guide for common errors in ADSelfService Plus end user portal
MFA
Authenticator configuration
- Resolving "Invalid Access URL" errors in Duo Security MFA configuration in ADSelfService Plus
- Multi-factor authentication using email OTPs
- Multi-factor authentication using RADIUS
- Configuring Salesforce Authenticator for identity verification
- Identity verification for the enterprise network using Zoho OneAuth
- How to configure multi-factor authentication with Duo Security
- How to enable phishing-resistant authentication using FIDO2 passkeys in ADSelfService Plus
- How to enable smart card authentication in ADSelfService Plus
- How to partially hide users' email IDs or mobile numbers on verification (MFA) pages
- Common VPN and RADIUS-based endpoints and authenticators supported by ADSelfService Plus
- Multi-factor authentication techniques in ADSelfService Plus
- Enable biometric, QR code, push notification, and TOTP-based verification for self-service password reset
- How to configure RSA MFA with ADSelfService Plus
Enrollment
- How to automatically enroll users for self-service password reset - Part ll
- How to automatically enroll new users for self-password reset
- Bulk enrolling Duo Security-enabled users for password self-service
- How to bulk disenroll users in ADSelfService Plus
- How to enable partial enrollment for Active Directory users in ADSelfService Plus
- How to enable force enrollment of users based on their OUs and groups using login script in ADSelfService Plus
MFA for endpoints
- Passwordless authentication: Process and implementation
- How to configure Dropbox MFA using ADSelfService Plus
- How to enable MFA for web applications
- How to enable MFA for privileged accounts
- Configuring MFA for FTD VPN using RADIUS
- Configure MFA for ISE with RADIUS
- Configuring Active Directory-based SSO and MFA for Cisco ASA
- Configure Active Directory-based SSO and MFA for Cisco FTD VPN
- How to enable MFA for Windows login
- How to enable MFA for local admin accounts and user accounts
- How to enable MFA for Remote Desktop (RDP) connections
- How to harden security for Windows endpoints
- How to configure MFA for Cisco ASA SSL VPN Using RADIUS
Conditional access
ADSelfService Plus login agent
Login agent installation and uninstallation
- Sequential ADSelfService Plus Windows agent login installation process
- Installing the ADSelfService Plus login agent through WMI or PAExec services instead of RemCom
- How to update the ADSelfService Plus Windows login agent
- Configuring the ADSelfService Plus login agent for machine MFA and password self-service in Linux
- Updating the ADSelfService Plus login agent for macOS
Password expiry notification
Password expiry notification
Password policy enforcer
Password policy enforcer
- Improving Azure AD password security
- Password Policy Enforcer configuration
- How to enforce password history in Active Directory
- How to leverage regex to enforce strong password policies
- Modify the password policy requirements text displayed on screen in ADSelfService Plus
- How to use regedit for password policy configuration
- How to enable Active Directory fine-grained password policy
- Writing regex patterns for the Password Policy Enforcer
SSO
SSO
- Troubleshoot Azure Active Directory seamless Single Sign-On
- How to enable SAML-based SSO for ADSelfService Plus login using OneLogin
- Configuring single sign-on for SAML-enabled custom enterprise applications
- Configuring Single Sign-On for Google Workspace (formerly G Suite)
- Configuring Single Sign-on for Zoho
- Configuring SSO for custom .NET applications using OpenID Connect protocol
- How to configure SSO for Amazon WorkSpaces using ADSelfService Plus
- How to use RSA Cloud as a SAML Authenticator in ADSelfService Plus
- How to enable SAML-based SSO for ADSelfService Plus using 1Kosmos
- Configuring SAML SSO for Active Directory Federation Services (AD FS)
- How to enable SAML-based SSO for ADSelfService Plus using Okta
- Troubleshooting the loading freeze error in the ADSelfService Plus login screen when NTLM SSO is enabled
Password sync
Password sync
- Configuring password synchronization for Office 365
- Password synchronization with OpenLDAP server
- Enable password writeback for self-service password reset in Azure AD
- How to sync passwords between Active Directory domains
- Integrate IBM iSeries/AS400 with Active Directory for password synchronization using ADSelfService Plus
- How to synchronize the passwords of Oracle Database accounts with Active Directory using ADSelfService Plus
- How to synchronize Active Directory passwords with ServiceNow using ADSelfService Plus
- Troubleshoot Azure Active Directory pass-through authentication
- Troubleshooting password synchronization
- Troubleshoot an attribute not synchronizing in Azure AD Connect
Integrations
Integrations
- Integrate ADSelfService Plus with Outlook Web Access (OWA)
- Configure Oracle E-Business Suite with ADSelfService Plus
- ADSelfService Plus integration with a workflow provider to maintain control over self-service actions
- How to integrate ServiceDesk Plus with ADSelfService Plus
- Integrate ADSelfService Plus with your SIEM system in real time
Product administration
Login settings
Customization
Mail/SMS server settings
Enterprise essentials
Mobile app deployment
Technician settings
Product security
General
- How to prevent brute-force attacks
- How to secure RDP connections from ransomware
- How to identify and mitigate the unauthenticated product integration vulnerability
- Addressing the identity verification gap
- Signs of MFA fatigue attacks and how to avoid them
- What is privileged access control
- Remote Desktop Protocol password brute-force attacks
- How to fight password theft using the multi-factor authentication techniques available in ADSelfService Plus
Admin settings
- Authentication bypass vulnerability management and remediation FAQ [CVE-2021-40539]
- Change the default admin password to improve security
- Our response to CVE 2023 35719
- Our response to CVE 2023 35719
- How to reset ADSelfService Plus’ default admin password
- How to unblock ADSelfService Plus' default admin account