• Flat user interface for the end-user portal: ADSelfService Plus' user portal gets a new makeover with flat user interface. 
  
• TFA for Windows and ADSelfSevice Plus logon now supports additional authentication methods including:
  
• Security Questions and Answers
  
• Email Verification 
  
• SMS Verification
  
• Google Authenticator
  
• Duo Security
  
• RSA SecurID
  
• RADIUS Authentication
  
• Push Notification Authentication
  
• Fingerprint Authentication
  
• QR Code-Based Authentication
  
• TOTP Authentication
  

Enhancements:

• Provision to allow users to complete their enrollment during the self-password reset/account unlock process itself after successfully proving their identity using any one authentication method.
  
• Mobile number and email address added by users during enrollment will be verified through an OTP for improved security.
  
• Force users to use specific email domain names (such as gmail.com or hotmail.com) during enrollment. 
  
• Option to separately mandate authentication techniques for enrollment and self-password rest/account unlock. 
  
• User portal is enhanced to display the calendar in any date-related field in the self-update layout.