How Cavco Industries strengthened its identity and access management with ADSelfService Plus

Business challenges

IAM Engineer Ted Peterson and his team faced ongoing challenges in securing identity and access across the organization. The help desk was overwhelmed with over 500 account unlock and password reset requests each month, burdening staff with repetitive work and reducing productivity. Without a scalable self-service system, users couldn't reset passwords or unlock accounts on their own, further adding to support backlogs.

The team also needed to strengthen login security. While Duo was already in place for MFA at the Windows logon screen, there was no secure self-service option for users to reset forgotten passwords or unlock accounts without bypassing MFA enforcement. Windows supports only one credential provider at a time, preventing Duo and any other password self-service tool from appearing together on the logon screen.

In addition, providing secure remote access to any self-service portal was a concern, as the system would need to be protected from direct internet exposure to prevent unauthorized access. With limited internal bandwidth for complex integrations, the team needed a solution that could be implemented with minimal disruption and backed by responsive support.

The outcome

Faced with high volumes of account unlock and password reset requests, MFA limitations in Windows logons, and the need for secure remote access, Cavco Industries adopted ManageEngine ADSelfService Plus. The implementation was smoothly handled by OnboardPro, ManageEngine’s service that offers personalized support for setup and deployment.

Sreejith from the implementation team played a crucial role in helping the organization address a unique limitation in Windows logons, which typically supports only one authentication method.

Peterson stated that the impact was immediate. Previously, the help desk handled over 500 password-related tickets each month. With the platform's self-service portal, users can now reset passwords and unlock their accounts independently, significantly reducing the help desk workload and restoring access much faster.

Additionally, the team configured a reverse proxy, extending secure portal access to remote users and ensuring identity protection beyond the corporate network.

With ADSelfService Plus and OnboardPro, Cavco streamlined password management, reduced support overhead, and improved the user experience, all while strengthening security.

About ADSelfService Plus

ADSelfService Plus is an identity security solution to ensure secure and seamless access to enterprise resources and establish a Zero Trust environment. With capabilities such as adaptive multi-factor authentication, single sign-on, self-service password management, a password policy enhancer, remote work enablement and workforce self-service, ADSelfService Plus provides your employees with secure, simple access to the resources they need. ADSelfService Plus helps keep identity-based threats out, fast-tracks application onboarding, improves password security, reduces help desk tickets and empowers remote workforces. For more information about ADSelfService Plus, visit https://www.manageengine.com/products/self-service-password.

OnboardPro

OnboardPro is a ManageEngine service that provides solution implementation to clients upon request. This service includes the installation and customized configuration of ManageEngine solutions. It enables clients to seamlessly begin work without worrying about the complexities of product installation, deployment, and use. Every client environment is unique and requires additional support beyond the basic installation and standard features. With custom onboarding, clients have the option to engage a team of product experts to manage the installation, implementation, customization, and training based on their business needs. For more information, visit manageengine.com/onboarding/manageengine-onboardpro-iam-and-siem-professional-service.html.