Self-service password management and single sign-on for on-premises Active Directory and cloud applications 1. Strengthen password self-service using the latest multi-factor authentication techniques. 2. Notify remote users via SMS and email about their impending password expiration. 3. Enforce centralized granular password policies across Active Directory and cloud applications. 4. Provide one-click access to cloud applications with Active Directory-based single sign-on. 5. Synchronize passwords between Active Directory and multiple cloud applications in real time

1. Self-service password management and single sign-on for
on-premises Active Directory and cloud applications
Harish Sekar
Technical consultant, Active Directory Solutions

2. "Your password is like your toothbrush.
Don't let anybody else use it, and get a new
one every six months."
A wise man once said. . .

3. Agenda
Session 1:
Modernize password self service with the latest authentication techniques
Session 2:
Password expiration notification and Universal Password Policy Enforcer
Session 3:
One Identity (Synchronize password changes + SSO)
Session 4:
Ensure 100% enrollment for password self service

4. Session 1
● Implement enrollment-free password reset
• Use personal mobile number and email address for authentication
● Strengthen password reset through multi-factor authentication
• Security Q & A
• Google Authenticator
Modernize password self service with the latest authentication techniques

5. Modernize password self service

6. • Two-factor authentication for access to ADSelfService Plus portal
- Self update
- Change password
ADSelfService Plus two-factor authentication

7. • Access for users on premise
- Gina/MAC
• Access for remote users
• Web-based, not Microsoft GUI based
- Allows for easier communication with user
- Allows for user to reset password remotely
• Features include
- Custom message
- Message can include URL link
- Administrative tools – Gina/MAC
End user password reset
Password Reset and Unlock

8. • Multiple notifications to users about password/account expiration
• Strong, custom password policy for native password changes
done through ADUC console
Password expiration notification and Password Policy Enforcer
Session 2

9. Password expiration notification

10. Password Policy Enforcer

11. ● Synchronize password changes in real time between AD and Office 365
• Self-reset Office 365 password without resetting AD password
● One-click access to SaaS apps through SSO
Real-time password change synchronization from AD to Office 365
Session 3

12. Password sync: one solution,multiple platforms!

13. ● End-user enrollment reminders via email and push notifications
• Force enrollment when users logon to their computers
● Automatic user enrollment
• CSV file
• External data source
Ensure 100% enrollment for password self service
Session 4

14. Ensure 100% enrollment for password self service
Quick enrollment

16. Questions are guaranteed in life. Answers?
We'll get there!

17. Thank you!
hary@manageengine.com