Windows Login Screen Re-Appears after Username/Password and no MFA Prompt
After we installed the ADSSP client on some machines. We see an odd behavior. At the logon screen you enter your username and password and enter, and it spins a minute and returns to the Windows logon screen. Instead of going to the MFA prompt. U/P are
ADSelfService Plus' build 6216 now released with enhancements.
Hey everyone, This is to announce the release of ADSelfService Plus' latest build, 6216. Enhancements: The jQuery UI used in the product has been updated from version 1.10.0 to 1.13.2. Terms and conditions for the usage of third-party products in ADSelfService
ADSelfService Plus Fixes and Enhancements [2023]
Release Notes for build 6400 ( Dec 10, 2023 ) Changes The public key certificate used while updating the product through the service pack has been updated. Release Notes for build 6309 ( Nov 25, 2023 ) Feature Offline MFA protection for macOS: Logins
Blank Screen on MFA Endpoint login
Hi All We are in the process of evaluating ADSelfService Plus and have run into an issue with enabling MFA on endpoints. These are all Windows units. On Windows Server 2016 and less, the process works fine, With MFA enabled on Server 2019 or above,
ADSelfService Plus' build 6215 now released with security issue fixes and enhancements
Hey everyone, This is to announce the release of ADSelfService Plus' latest build, 6215, with the following security issue fixes and enhancements: Enhancements: Support for HTTP SMS macros: The following macros are now supported for the HTTP method under
ADSelfService Plus 6214 released with an issue fix
Hello Everyone, ADSelfService Plus build 6214 has been released to fix an issue. Issue fixed Prevented the password macro from being used in the admin/manager email notification after a password reset or change operation. How to update to this build?
ADSelfService Plus won't autostart
ManageEngine ADSelfService Plus Free tool, version: 6212 Hi, I upgraded my server from Windows Server 2012 to Windows Service 2019. I've done it the lazy way, so inplace upgrade. After the upgrade ADSelfService Plus won't autostart on reboot. When I start
ADSelfService Plus Technician Login
I set up my Active Directory account to be a Technician, being that I have push notification MFA setup for my AD account and I was expecting the login to generate a push MFA verification. However, it didn't and I can't seem to find if this is an option.
ADSelfService Plus build 6211 now released with an important security update.
Hello everyone, This is to announce the release of ADSelfService Plus' latest build, 6211, with some important updates. Important update : Third-party requirement for NTLMv2 SSO: To enable NTLMv2 SSO in build 6211 and above, you have to manually download
ADSelfService Plus build 6210 released with some enhancements and issue fixes
Hello everyone, We are glad to announce the release of ADSelfService Plus' latest build, 6210, with the following enhancements and issue fixes. Enhancements: Notification Center: To ensure product security, a notification center has now been included
CVE-2022-42889 - Possibly exploitable in AD Self Server Plus
Dangerous hole in Apache Commons Text: https://nakedsecurity.sophos.com/2022/10/18/dangerous-hole-in-apache-commons-text-like-log4shell-all-over-again/ CVE-2022-42889 Recommended fix is to upgrade the .jar library to commons-text-1.10.jar or higher. AD
ADSelfService Plus build 6209 released with some issue fixes
Hello everyone, This is to announce the release of ADSelfService Plus' latest build, 6209, with the following issues fixed. Issues fixed: An issue in the Restrict Users scheduler under License Management when there were different domains containing the
ADSelfService Plus' latest build 6201 released!
Hello everyone, This is to announce the release of ADSelfService Plus' latest build, 6201, with the following enhancements and issues fixed. Enhancements: Mac Agent support has now been extended to macOS Monterey. XLSX format is now supported for exporting
The ADSelfService Plus mobile app now supports MFA for app login, Passwordless login and more!
Hey there! We are thrilled to announce the release of ADSelfService Plus' latest build, 6207, with some major updates to the ADSelfService Plus mobile app. Features: MFA for mobile app login: ADSelfService Plus mobile app logins can now be secured with
ADSelfService Plus 6206 Hotfix Release
Hello everyone, We are glad to announce the release of build 6206 with the following issue fixes: Issues Fixed : An issue with the functioning of the custom range filter in Audit Reports, when there were a large number of audit records, has now been fixed.
ADSelf Service plus
What do i need to do if i want my ADSelf Service plus to be accessible from the Internet for external users ? Currently the server is in my LAN for internal users. Management thinks that it is a good idea for users to be able to access this external
ADSelfService Plus now extends MFA and Password Policy features to product technicians
Hello everyone, We are glad to announce the release of ADSelfService Plus' latest build, 6204, with the following enhancement and issue fixes. Enhancement: The MFA and Password Policy Enforcer features have now been extended to technicians who use
Primary and alternative method
Hello everyone. I would like to ask if there is a way to set up a primary method to authenticate (eg. always use push notification) but when not available the user could click a link on the authentication page and select an alternative method. Thanks
ADSelfService Plus' latest build 6203 now released with an important security issue fix
Hey everyone, This is to announce the release of ADSelfService Plus' latest build, 6203, with the following issue fix. Issue fixed: A denial-of-service attack issue (CVE-2022-34829) in the ADSelfService Plus Mobile App Deployment API has now been fixed.
ADSelfService Plus' latest build 6200 released!
Hello everyone, This is to announce the release of ADSelfService Plus' latest build, 6200, with some issue fixes. Issues fixed: The communication between the Password Sync Agent and the ADSelfService Plus server has now been secured with the inclusion
ADSelfService Plus Fixes and Enhancements [2022]
Release Notes for build 6212 (Nov 14, 2022) Feature: Hardware TOTP token support: Hardware tokens such as Protectimus hardware TOTP token and Deepnet Security hardware token can now be configured as a custom TOTP authenticator for identity verification.
MFA for Endopoint not working on unlock
I have MFA for endpoint setup on our servers and when logging in it functions without issue. But when a server is locked and then unlocked it does not prompt for MFA and lets the user right in. Is this expected behavior? If not what needs to be changed
ADSelfService Plus' latest build 6123 released with some security issue fixes
Hello everyone, This is to announce the release of ADSelfService Plus' new build 6123 which fixes the following security vulnerabilities. Issues fixed: A security vulnerability which exposed admin credentials if the ADSelfService Plus server access was
Attackers Gaining Administrative Access to Zoho ManageEngine ADSelfService Plus Instances
FYI anyone with internet facing selfservice should act quick Rapid7 reporting Attackers Gaining Administrative Access to Zoho ManageEngine ADSelfService Plus Instances Rapid7 Managed Detection and Response (MDR) recently observed several incidents in
Locked out of system
We've updated our main AD administrator account which was configured within SelfService for domain configuration. Problem is we are now unable to log in to the system to update the configuration with the new password (get Invalid domain configuration
[Important] ADSelfService Plus 6122 Security Fix Release
Hello everyone, This is to announce the release of ADSelfService Plus' latest build, 6122, with the following issues fix. Issue Fix: In product instances where post-action custom scripts are enabled, a security vulnerability (CVE-2022-28810) which could
Hide synchronization status
Hi, I want to know if there is way not to display the status of the synchronization ? We synchronize multiple directories, but in the Domino directory only 80% of the users have an account, and for the others the popup displays that the user cannot be
ADSelfService Plus' latest build 6121 released with some security fixes
Hello everyone, ADSelfService Plus' latest build 6121 fixes the following security vulnerabilities. Issues Fixed: A security vulnerability (CVE-2022-24681) which allowed XSS script execution in the reset password, unlock account, and user must change
Procedure for resetting a User using Authenticator
Here is the procedure I use when there's a mismatch/error when usingt an Authenticator: 1) In the cellphone Authenticator, remove the User's account. 2) Run ADSS Reports / Enrollment Reports / Enrolled Users Report 3) Checkbox the User. A Disenroll/Trashcan
Log4j dependency removal's impact on RSA SecurID-based MFA
In light of the recent discovery of Apache Log4j library's security vulnerability (CVE-2021-44228), ADSelfService Plus released its build 6119 that completely removed dependency on the Log4j library. However, the Log4j library is required if you have
Tell us what you think about ManageEngine ADSelfService Plus
We, at ManageEngine ADSelfService Plus, value our customer's views and experiences. Share with us your thoughts on ADSelfService Plus through a quick survey. Your feedback, good or bad, will be the key to improving the product. In this survey, you can
MFA does not work (not there on enrollment page)
Hi, I'm evaluating the ADself service plus, mostly for MFA for endpoints. I create a new policy and in my policy choose an OU (where my machine is there) and an AD group which user X is a member of. Also I choose Microsoft and Google Authenticator for
[Log4j Advisory] ADSelfService Plus 6119 released to remove Log4j dependency
Hello Everyone, We would like to inform you that ADSelfService Plus build 6119 has been released to remove Log4j dependency. Issue fixed: Log4j dependency in ADSelfService Plus has been removed to ensure security. Is ADSelfService Plus affected by Log4j
Gearing up for 2022's password challenges with ADSelfService Plus
This year, the rapid adoption of hybrid and mobile working methods made managing and securing passwords particularly challenging. For example, employees on the move will not be connected to the organization's secure networks, and hence, their devices
ADSelfService Plus' latest build 6118 released with a minor issue fix
Hello everyone, ADSelfService Plus' new build, 6118, fixes the following issue. Issue Fix : An issue in renewing the SAML certificate when ADSelfService Plus is the identity provider has now been fixed. How to update? You can update to the latest build
ADSelfService Plus feature highlights from 2021
Season's greetings! With 2021 nearing its end, we are writing to take you through the top features introduced in ADSelfService Plus that make it a more comprehensive self-service password management, MFA, and SSO solution. Here are some of the major
How to change the email/sms template for OTP verify
Hi all, I am trying to find the configure to change the content of email/sms with OTP code. Now every time I add new email/mobile number and click verify, the email with OTP will be like this: "We received an enrollment request to use this email address
Error message when installing ADSelfService Plus Service Pack
I'm updating ADSelfService Plus with service pack ManageEngine_ADSelfService_Plus_6_1_0_SP-1_6_0 and received error message during pre-validation: "Can't create/write to file "file path" #sql_1f18_0.MYi (Errcode: 2) I need to install this update due
ADSelfService Plus' latest build 6117 now supports Azure AD MFA
We are excited to announce the release of ADSelfService Plus' new build, 6117, with the following updates. Highlight : Azure AD MFA support: Azure AD MFA can now be used for identity verification during self-service reset/unlock; self-service portal login;
ADSelfService Plus' latest build 6116 released with some security fixes
Important announcement: ADSelfService Plus 6116 has been released with the following issues fixed. Security Issue Fixes : All the API endpoints have now been strengthened to be more secure. A security vulnerability which allowed performing unauthenticated
Next Page