[Tips and Tricks] - How to enable biometric, QR code, push notification, and TOTP based verification for self-service password reset?

ADSelfService Plus supports multi-factor authentication (MFA) to verify and secure the identity and access of users. The latest in the league is the mobile app authenticator that can verify identities of users who wish to perform self-service password reset.

Deploying a custom blend of these authentication methods prove effective in keeping attackers at bay. And with administrators holding the power to determine how end users can authenticate themselves, there is uniformity across the organization’s user community.

The mobile app authenticator supports user identity verification via the following authentication methods, that come built-in with the ADSelfService Plus mobile app:

Fingerprint authentication
QR code-based authentication
Push notification authentication
Time-based one-time passcode authentication

With mobile verification in addition to SMS verification, administrators can equip end users to take care of the security of their accounts.

This article will help you enable the required identity verification techniques for verifying user identities via the mobile app authenticator.

Steps involved:

Log into ADSelfService Plus as an administrator.
Navigate to Configuration > Multi-factor Authentication.
Select the appropriate policy from the drop-down list.
Click the Mobile App Authenticator tab and check the Enable Mobile App Authenticator option.
Select one or more of the authentication methods (push notification, fingerprint, QR code, and TOTP) to suit your requirement.