Free EditionWith the sophistication of security breaches increasing every day, relying only on usernames and passwords to secure users' accounts is no longer an option. It has become necessary to add additional layers of security to filter out unauthorized users. Two-factor authentication (2FA) and multi-factor authentication (MFA)—methods in which user identities are verified with additional authentication methods like biometrics, Google Authenticator, and YubiKey—make this possible.
With ADSelfService Plus' MFA for Machine Logins feature enabled, users have to authenticate themselves in two successive stages to access their Windows machines. The first level of authentication is through the usual Windows Active Directory credentials. The second level of authentication can be through one of the following:
Implementing MFA during Windows logins greatly reduces the risk to sensitive data, even in cases where passwords are compromised. This means that even if unauthorized users gain access to a user's password, they still need access to the user's phone or email to get the verification code.
On top of this, SMS and email-based verification codes along with authentication codes from Google Authenticator, YubiKey, Microsoft Authenticator, and Duo Security are unique to each user. These codes can only be used once and will expire if they aren't used within a certain period.
When Windows logon MFA is enabled, it adds MFA to all local and remote Windows login attempts. MFA is even more important for users trying to access an organization's internal resources remotely.
Virtual private network solutions facilitate remote access but are susceptible to data breaches. ADSelfService Plus offers MFA for VPNs to strengthen VPN security. In addition to the username and password provided to the VPN server by the user, users will need to undergo additional factors of authentication, as configured by the administrator, to be able to access their company's resources.
Administrators can customize ADSelfService Plus' MFA features based on their organization's needs. Some of the different ways in which MFA can be customized are listed below:
MFA ensures that even if the passwords are compromised, unauthorized users will still need access to the email or phone of an authorized user to be able to log in to their Windows machine. This ensures greater security.
There are fifteen different authenticators in ADSelfService Plus, giving IT administrators a wide variety of options to choose from to set up an authentication mechanism for their users.
ADSelfService Plus also offers administrators the ability to configure MFA based on users' OU, group, and domain memberships. So users with different privileges can have different levels of authentication.
ADSelfService Plus works for Windows Vista and all Windows operating systems released after, including Windows Server 2008 and all Windows Server operating systems released after.
Free Active Directory users from attending lengthy help desk calls by allowing them to self-service their password resets/ account unlock tasks. Hassle-free password change for Active Directory users with ADSelfService Plus ‘Change Password’ console.
Get seamless one-click access to 100+ cloud applications. With enterprise single sign-on, users can access all their cloud applications with their Active Directory credentials. Thanks to ADSelfService Plus!
Intimate Active Directory users of their impending password/account expiry by mailing them these password/account expiry notifications.
Synchronize Windows Active Directory user password/account changes across multiple systems, automatically, including Office 365, Google Workspace, IBM iSeries and more.
Ensure strong user passwords that resist various hacking threats with ADSelfService Plus by enforcing Active Directory users to adhere to compliant passwords via displaying password complexity requirements.
Portal that lets Active Directory users update their latest information and a quick search facility to scout for information about peers by using search keys, like contact number, of the personality being searched.
