Compare ManageEngine ADSelfService Plus vs. SecureMFA

Both IT teams and end users are afflicted by password reset tickets. IT teams will often push more urgent issues down the queue to ensure that users don't have their work put on hold while their passwords reset. Password reset tickets can be costly if they aren't addressed promptly. Nearly 30 percent of all help desk tickets were caused by forgotten passwords. It is not surprising that large companies have spent more than $1 million to resolve password-related help desk requests. It is a good habit to change passwords regularly, as it helps prevent cyberattacks caused by stolen credentials. Security experts recommend that administrators ensure that users change their passwords regularly and have password expiration policies in place.

The OTP authentication module for Microsoft ADFS, compatible with both ADFS 2019 and ADFS 2016 servers, facilitates multi-factor authentication (MFA) through a Time-Based One-Time Password (TOTP) mechanism, adhering to RFC6238 standards. This MFA solution mandates that users input a one-time passcode generated by authenticator applications like Microsoft Authenticator, Google Authenticator, or Symantec VIP to finalize their second factor authentication during the login process. Additionally, it allows for self-registration via QR codes using free mobile apps, while securely storing OTP data in Microsoft Active Directory attributes or MS SQL Server. Encryption of QR secrets is implemented using AES 256-bit technology, enhancing security further. The configuration also includes specifying network locations (both IPv4 and IPv6) from which users can scan the QR code, and it supports trust relationships across multiple ADDS forests, making it a highly versatile security solution. With these features, organizations can effectively bolster their security protocols and ensure a robust authentication process.