ADSelfService Plus Fixes and Enhancements [2023]
- An authentication issue involving partially enrolled users has now been fixed.
- An issue in the Windows Login Agent which prevented users from accessing Outlook, SharePoint and shared resources from machines running Windows 10 and above has been fixed.
- An
issue where the Force Enrollment using Logon Script configuration would
fail when the Window Title exceeded 50 characters has now been fixed.
- An unsupported authenticator issue that caused OWA logins via the mobile site to fail has now been fixed.
- The
Enrolled Users Report now allows administrators to view the
authenticators users have enrolled for and disenroll them from specific
authenticators, using both manual and bulk disenrollment methods.
- Backup codes for technician accounts: Admins can now generate MFA backup codes for technicians from the Enrolled Users Report.
- Technicians can now be delegated the privileges of:
- Managing users' license consumption
- Scheduling and exporting reports
- Customizing and managing the installation of the Windows, macOS and Linux Login Agents
- Updating cached credentials configurations
- An
issue in the Password Sync Agent that left it susceptible to
brute-force attacks has now been fixed. This issue was reported by Skay.
- A denial-of-service vulnerability in the ADSelfService Plus Mobile App Authentication API has now been fixed.
- An issue where the Windows Login Agent failed to update while installing it via GPOs has now been fixed.
- MFA issues in the Windows Login Agent caused by mismatched UPN logins, and a few other crashes have now been fixed.
- An issue in the NPS extension for VPN MFA has now been fixed.
- The jQuery UI used in the product has been updated from version 1.10.0 to 1.13.2.
- Terms and conditions for the usage of third-party products in ADSelfService Plus have been updated.
Enhancements:
Support for HTTP SMS macros: The following macros are now supported for the HTTP method under custom SMS provider settings:
%uniqueId%: To send a random integer as a unique ID for each message request
%currentTime%: To send the current timestamp of the message request
%expiryTime%: To specify the time at which the message request expires
Issue fixes:
An issue that caused admin login failure in the TOR browser when an admin portal restriction based on IP address was configured has now been fixed.
An issue that caused password sync failure with the SAP NetWeaver application due to password policy mismatch has now been fixed.
OAuth/OIDC issues caused due to mismatched formatting in the well-known configuration and issuer URLs, and invalid Key ID token responses sent to target applications has now been fixed.
OIDC SSO login failure during IdP-initiated SSO has now been fixed.
An issue that occurred while attaching files in the On Specific Day and Password Expiry Notification email editors has now been fixed.
An issue in which OWA was not functioning when IP restriction was imposed via a conditional access policy has now been fixed.