Invalid Email-ID
Hi. Trying to run through the Mobile App Deployment wizard and at the second stage "Getting CSR Signed from ManageEngine" I'm asked to enter a From Mail-ID. I enter a valid address but I get an error saying "Invalid Email_ID" Any ideas?
DNS refresh?
Is there a way to refresh/flush the DNS when trying to install the GINA? There are a lot of computers that have incorrect and old DNS/IP details so the server cannot find them.
Adding wildcard SSL cert to ADSelfService Plus
Hi, I have a wildcard certificate for our domain and I have the *.crt files but I'm not sure how to import these into ADSelfService Plus?
SSL certificate issue
Hi, We've recently purchased ADselfservice plus portal, we've gone through of configuring everything so where able to access the portal outside the network however I want to make it more secure, but we are having some issues with installing the SSL Certificate. We already have an wildcard SSL certificate and when I go to download the certificate from 123 Reg, it isn't an download file but text. Do we copy this text into notepad to then convert it to a pfx format file? I have done the above and
Error when changing, resetting or unblocking user "Account blocked."
We are presenting the error attached to the platform in an exporadic but concurrent way, when changing the password, resetting the password and regardless of the type of user authentication "SMS or Googl Authenticator" says that the user is blocked even though the policy is configured option to unlock the user once the key is reset or changed. already validate the user in the active directory and it is not blocked, could it be an error in the application ?.
How Can I config Windows Login TFA
Hello there, I have set up a new policy configuration on ADSSP. I activated the verification code in the Login TFA tab for this policy. I chose only for IT users over OU. I made Password Policy Enforcer settings for this policy. I enabled Windows Logon TFA from the GINA / MAC tab. I restarted the ADSSP service. I reinstalled a test user from GINA / MAC Installataion. but windows logon TFA is not working Please help me?
Running 2 instances of ADSS on the same AD
Hello, I would like to know whether it is possible to have 2 separate instances of AD SelfService Plus on the same AD. We want to use one of those as internal and the other that we already have will be external. Would we need separate licensing for the second one? Thanks Zhivko
[Tips & Tricks] How to enable SAML-based SSO for ADSelfService Plus using OneLogin?
Last week we saw how ADSelfService Plus facilitated SSO for its web console through Okta. This week let’s learn how to set up one click access to ADSelfService Plus’ console through OneLogin. If SSO is enabled, whenever a user attempts to log on to ADSelfService Plus’ web console, OneLogin will authenticate the request and grant access to the ADSelfService Plus portal. When a user is already logged in to OneLogin and tries to access ADSelfService Plus, the user will be granted access automatically.
[Tips & Tricks] How to enable SAML-based SSO for ADSelfService Plus using Okta?
If your organization uses SAML-based identity provider (IdP) applications such as Okta, you can enable one click access (SSO) to ADSelfService Plus' web console. Once SSO is enabled, whenever a user attempts to log on to ADSelfService Plus’ web console, Okta will authenticates the request and grants access to ADSelfService Plus portal. If a user is already logged in to Okta and tries to access ADSelfService Plus, the user will be granted access automatically. Prerequisite If you do not find ADSelfService
[ManageEnginge] Effective AD password management techniques revealed
Hello, Whether you are an administrator or an end user, managing passwords is hard. It doesn't have to be that way anymore! Attend our Effective password management techniques for your Active Directory environment webinar and learn simple techniques that boost up both the productivity and security of your IT environment. ..Book your spot now.. What's in it for you By attending our webinar you will learn how to: Enable password self-service and self-account unlock for end users. Group or OU-specific
[Tips & Tricks] Bulk disenrollment of users in ADSelfService Plus
ADSelfService Plus offers administrators the convenience of performing bulk disenrollment of users. This feature allows them to manage user’s licenses effectively and also not be pushed to the extent of disenrolling users one at a time. Administrators can choose between the following two options to perform bulk disenrollment. Select multiple users from Enrollment Reports. Import users from a CSV file. Method 1: Select multiple users from Enrollment Reports. Log into ADSelfService Plus as an
[Tips & Tricks] Updating cached credentials by configuring custom VPN providers in ADSelfService Plus.
ADSelfService Plus can automatically update the locally cached credentials in remote users’ machines as and when they reset their passwords. To update cached credentials, ADSelfService Plus requires the Windows logon agent, bundled with the product, and a command line VPN client to be installed in the users' machines. It supports these VPN clients: Fortinet, Cisco IPSec, Cisco AnyConnect, Windows Native VPN, SonicWall NetExtender, Checkpoint EndPoint Connect, and SonicWall Global VPN. You can also
error when changing, resetting or unblocking user
We are presenting the error attached to the platform in an exporadic but concurrent way, when changing the password, resetting the password and regardless of the type of user authentication "SMS or Googl Authenticator" says that the user is blocked even though the policy is configured option to unlock the user once the key is reset or changed. already validate the user in the active directory and it is not blocked, could it be an error in the application ?.
error el cambiar contraseña ADSELSERVICE "USUARIO BLOQUEADO."
Agradezco su colaboracion para la verificación del aplicativo adselfservice ya que en ocasiones se está presentando el mensaje que se adjunta a pesar de que el usuario no se encuentra bloqueado. A pesar dese restablece la contraseña con opciones de autenticación ya sea por mensaje como por Authenticator.
Error when changing, resetting or unblocking user "Account blocked."
We are presenting the error attached to the platform in an exporadic but concurrent way, when changing the password, resetting the password and regardless of the type of user authentication "SMS or Googl Authenticator" says that the user is blocked even though the policy is configured option to unlock the user once the key is reset or changed. already validate the user in the active directory and it is not blocked, could it be an error in the application ?.
SSL Certificate Issues on ADSelfService Plus
Hi All, I have installed an SSL certificate on my ADSelfService Plus deployment. The cert seems to bind fine, and works perfectly on the site. However, when I go to configure the mobile app deployment, I see the following error: Name in SSL certificate conflicts with server name in URL The server name is selfservice.mydomain.ie, The CSR was created to that effect and issued by GoDaddy. Any help greatly appreciated. Thanks Chris.
ADSelfService Plus - HIPAA
I hope this is the right place to post but does anyone know where I can find info on weather ADSelfService Plus is HIPAA compliant?
Logs To Syslog Server : Error Destination host unreachable
When trying to direct the log of Ad Self Service Plus to our log server, it gives the following error.of our product to our log server, it gives the following error. What would be the reason? Destination host unreachable
Self-Service plus 5601 - not able to unlock the user account
Hello, I am currently evaluating the latest Self-Service Plus. I was able to install, integrate it to the AD without any problems. Then I started to test the features: a. User Enrollment: test passed b. To change Password: test passed c. Forgot/reset Password: test passed d. Unlock account : Having difficulties. I go through the unlock process from A to Z and I get the final message that the account is successfully unlocked, but when I check in AD the account is not unlocked.
Release notes
Hi, Where can I find the release notes for: ManageEngine_ADSelfService_Plus_5_5_0_SP-9_9_0.ppm and ManageEngine_ADSelfService_Plus_5_6_0_SP-0_1_0.ppm Thanks Zhivko
Issues installing new SSL certificate
Hello, I am running ADSelfService Plus build 5304 on Windows 2008R2 and can't seem to get the SSL certificate installed properly. I used the SSL certification tool to generate a new CSR. I submit the CSR to get an Incommon certificate along with the Incommon Intermediate certificate and add the certificates to the ./jre/bin/SelfService.keystore using the import commands for Verisign certificates. Then I copy the newly created keystore file to the ./conf folder, check the server.xml file and restart
ADSelfService Plus 5602 released with a bunch of enhancements and issue fixes
The latest build of ADSelfService Plus now has an option to specify the length of the verification codes and also provides the ability to install GINA/CP logon agent using DNS hostname. This build also fixes some important security issues in the product.
Best Practice for License Recovery in ADSelfService?
Hello. We are currently in a reactive cycle where we manually remove licenses in bulk for disabled, deleted, and unowned licenses. Is there a proactive or automated process where we can recover a license when a user is deleted or disabled from our directory? After reading the documentation I see that we can perform removals in bulk through license management, which makes the process quick, but we would prefer to be proactive about it. Thanks in advance!
[Tips & Tricks] Configuring high availability in ADSelfService Plus
ADSelfService Plus utilises automated failover to support high availability in case of system and product failures. Essentially, this means that when the ADSelfService Plus service fails on one machine, another instance of ADSelfService Plus running on another machine automatically takes over. Before configuring high availability in ADSelfService Plus, make sure that the following conditions are satisfied. Condition 1: Download and install ADSelfService Plus in two separate machines. If you already
[Tips & Tricks] How to prevent concurrent logins for a user in ADSelfService Plus
Concurrent logins can lead to the use of valid credentials by illegitimate personnel at the same time as the legitimate user to authenticate to the network. This could lead to multiple security issues within the organization like misuse of the user's personal information or resources to perform unauthorized actions. This can also result in the user being wrongly held accountable for the harmful actions of another user with malicious intent. In ADSelfService Plus, when a user is logged in from multiple clients,
Photo Attribute used in ADSelfService
Where does the user's photo come from? We have deleted all our user photo's (long story) but there are a number of users that still show a photo. I have checked and none of these users have the photo, or jpegPhoto or thumbnailLogo or thumbnail Photo attributes populated! I have cleared cache, new profile and even a new workstation, but the photo remains. Thanks Bob
Password Synchronization with Novell eDirectory (openLDAP)
How do you setup an openLDAP Password Sync? Specifically I want to link an old Novell eDirectory (more or less openLDAP) change the passwords at the same time. I've followed the documentation (what I can find) and it doesn't really seem to be the right. The "Domain Name" in the example say (dc=example,dc=com) but we use (o=companyname) As for the user, the FQDN would be (cn=admin,ou=admins,o=companyname) but I eventually tried just cn=admin,ou=admins hoping that it would append the "Domain Name"
issue with format of Password Expiry notification
Since updating to version 5.6 (5600), the formatting of the email for Password Expiring is not following the spacing and character settings we used in the editor. The text is all saved without formatting. Also, we can not delete the existing notification (in attempts to create a new one). Creating yet another one seems to save, but it does not show up. We are using the Free edition of the SelfService Plus for password expire notifications.
[Free White Paper] Common password attack methods and how not to become a victim
Verizon data breach investigations report (2018) revealed that over 43,000 successful accesses via stolen credentials were recorded in 2017. Hackers are incessantly looking for vulnerabilities in any form to intrude into your network. Even if one account in your network is compromised, there's a high chance of sensitive data leakage.How do you prevent this? How do you secure your privileged user accounts and passwords? Read our expert's guide "Shifting landscape of passwords and how to keep up with
ADSelfService Plus 5601 released with Hebrew language support.
We've updated ADSelfService Plus to 5601. This release includes the following enhancement: Highlight: ADSelfService Plus now supports Hebrew language. How to update? Update using service pack. New to ADSelfService Plus? Download the latest version of
Force Password Change on Enrollment
How can I force users to change their password after enrolling?
Clear Enrollment
How does my help desk staff clear security questions for someone who forgot their answers? My staff has "Operator" role in the "Technician Settings." They do not have an option to clear enrollment or questions for users. There is only 2 roles, admin and operator. Or maybe there is another way?
Cannot generate CSR
Hi, I installed selfservice on windows server. I went to the admin area and filled out the generate CSR form. I click generate and nothing happens. Any ideas?
Two Factor Authorization Problems
Hello everybody, I would like to implement the two factor authorization. That works so far. If a user wants to reset his password he must connect to the Webportal an log in with his domain user name. In the next step the user can choose the option how he would like to reset the password. Either by mail or via the Mobile Phone Number. Is there a way to ban this selection? I would like the user only needs to specify his domain user name and then automatically gets an SMS on the deposited Mobile Phone
Selfservice not starting after new certificate install
Hi there, I have my own domain rootCA and issued a certificate after completing the csr process. I imported the certnew.cer into the selfcert.keystore file. Moved the selfcert.keystore file to the ./conf folder. Here is the SSL block in my server.xml: <Connector SSLEnabled="true" acceptCount="100" clientAuth="false" connectionTimeout="20000" debug="0" disableUploadTimeout="true" enableLookups="false" keystoreFile="./conf/selfcert.keystore" keystorePass="mypass" maxSpareThreads="75" maxThreads="150"
Limit "Search Employee" and "Organization Chart" results
Is there a way of limiting the above searched to a specific OU or a custom LDAP Filter? Also, is it possible to remove the "[Change]" link after the " Organization Chart for Domain"? Thanks Bob
Making a "New Custom App" for Password Synchronization
I must say, there are a large number of premade connectors for password synchronization, however I have a number of legacy applications (most built in-house) that are going to need custom apps. However the setup seems to be limited to SAML applications. Is there a way to use a custom made script? Thanks Bob
Using DUO when Unlocking Account/Resetting password
I've enabled DUO security as per the documentation (https://www.manageengine.com/products/self-service-password/kb/duo-enabled-two-factor-authentication.html) but when I try the unload/password reset feature I never get a DUO notification! I verified that the server can access the "API hostname", however we do have local DUO proxy server. Any idea where I might look for a solution? Thanks Bob
Admin Login option gone
I made a customized login page logo change, and now I can't find the tab to allow for admin login. How do I restore the ability to login as an admin? Is there another port or page to access the admin login directly or does it share the function with the standard domain user login only?
ADSelfService Plus & Symantec VIP for MFA
Has anyone successfully integrated ADSelfService Plus with Symantec VIP for multi-factor user authentication during "forgot my password" and "unlock account" actions? If yes, can you share details how did you perform the integration?
Next Page
