Product Overview
Give Power Back to Your People
Click Studio's Password Reset Portal is a Self-Service Reset portal, allowing end-users to easily reset their own Active Directory password 24/7, based on the option of up to 9 different Secure Verification Policies to choose from.
In addition to reducing Service Desk calls, this module provides Password Expiration Notifications to remind users when their password must next be reset, tools for helping identify where user Account Lockouts are occurring, and also Trending Reports on portal usage and the value the module provides.
The Portal can be installed on your internal network, your DMZ (Demilitarized Zone), or in cloud-based services such as Microsoft's Azure or Amazon's AWS.
Reduce Service Desk Calls
It’s estimated that 30% to 50% of service desk calls are for password resets, with each call costing around $70. Not only is this expensive, but it distracts the service desk team from performing higher value tasks for the business.
The Flexibility of up to 9 different Verification Policies
A key distinction from other competitors in the market, is the ability use one or more Verification Policies to securely "identify" your users. Verification Policies are used when the user's Enroll to use the portal, and also when resetting/unlocking their accounts. A full list of the Verification Policies can be found here - View Verification Policies.
Password Policies
Want to enforce a specific Password Policy in your users? You can create any number of different Password Policies, which requires different password lengths and complexities, and then assign those policies to users.
The intention is to match any default domain password policies, or any fine grained password policies, so your users know what is expected of them when creating new passwords - on screen instructions are provided guiding the user through the requirements for their passwords.
Bad Passwords
Want to restrict certain password from being used in your organization? Simply add them as a 'Bad Password' into Passwordstate, and users will be told the password value is not allowed.
Specifications
Verification Policies
A key aspect to a Password Reset Portal platform, is being able to securely identify who the user is, prior to allowing them to reset or unlock their Active Directory account.
Click Studios provides 9 different Verification Policies, which can be applied to different sets of users, each based on industry standard two-factor authentication methods, or other methods for verifiying a user. The following Verification Policies are available:
-Duo Push Authentication
-Email Temporary Pin Code
-Google Authenticator
-One-Time Password (based on the TOTP and HOTP standards)
-PIN Number (with configurable length)
-Questions and Answers
-RADIUS Authentication
-RSA SecurID Authentication
-SAML 2 Authentication
Enrollment Email Templates
Each Verification Policy can also have its own customized enrollment email template, which can be sent to users with instructions of how to enroll. There are three enrollment emails in total, each being sent on different configurable schedules to remind them enrollment is still required.
Active Directory Account Management
Manage certain Active Directory account processes right from within the Passwordstate user inteface, providing a basis for comprehensive reporting on Portal usage and value.
User Account Management
Ideally, your Service Desk should not be required to perform any Active Directory account management within the Passwordstate User Interface, but under certain circumstances you may find user's still calling the Service Centre for assistance. The types of scenarios where this may be required are:
-They could not use the Portal for various reasons
-They need assistance with the Verification Policy applied to their account
-They need their Enrollment Email resent to them again manually
If the user has phoned the Service Centre in order to have their AD account reset or unlocked, then it is recommended to use the Passwordstate User Interface for this instead of the Active Directory tools. This allows you to record these events for reporting purposes - and helps identify if there are certain reasons why users are not using the Password Reset Portal.
Insights And Reporting
Make use of any of the 18 different Data or Trending reports available, to realize the true value of a Password Reset Portal platform.
Password Reset Portal Reporting
There are 18 different reports available, to help you understand how the Password Reset Portal is being used, or could be used better by your user community.
-Enrollment Reports
Show trend of Total Users vs Enrolled Users
Show trend of Enrolled Users
Show users who are yet to enroll
Show the enrolled status for all users
Show users who are having issues enrolling
Show summary of which enrollment emails have been sent
-Reset & Unlock Activity Reports
Show trend of Account Unlocks for Portal vs Admin
Show trend of Account Unlocks via the Portal
Show trend of Account Unlocks by an Admin
Show trend of Account Resets for Portal vs Admin
Show trend of Account Resets via the Portal
Show trend of Account Resets by an Admin
-Verification Policy Reports
Show users who have multiple policies
Show users who have no policy
Show policies and assigned members
-User & Security Group Reports
Show users with 'User cannot change' or 'Password Never Expires'
Show members of each Security Group
Show members not in any Security Groups
Active Directory Domain Support
The Password Reset Portal can be used for trusted and non-trusted Active Directory Domains, all while honoring Domain or Fine-Grained Password Policies within each domain.
Active Directory Domain Support
The Password Reset Portal web site can be installed anywhere you like, either in your internal network, in your DMZ (Demilitarized Zone), or in cloud-based services such as Microsoft's Azure or Amazon's AWS.
The Portal securely communicates back to the API in your Passwordstate install, where the API then securely communicates back to any required number of Active Directory Domains via LDAP over SSL.
Synchronizing User Accounts and Security Groups
All user accounts and security groups from Active Directory can be synchronized into Passwordstate, on any schedule you require. Once done, Verification Policies can be applied to user's accounts, or security groups, which allows users to the enroll and start using the portal.
Account Lockout Monitoring
Let Passwordstate help ease the burden of trying to find out where users are constantly being locked out in your domain.
Tracking Account Lockouts
Trying to identify where a user's account is constantly being locked out can be quite time consuming and expensive in terms of staff resourcing, and very frustrating for the end user.
On each Active Directory Domain you have added into Passwordstate, you can add in one or more Domain Controllers to monitor for Account Lockouts, or Bad Login Attempts (Event Log Monitoring). Auditing data is then available to try and help you identify where a user's account is being locked out from. Querying of Event Logs can be configured for intervals of 5, 15, 30 or 60 minutes.
Password Expiration Notifications
Send users regular reminders that they must soon reset the Active Directory account password, mitigating against issues accessing your network and other business systems.
Configurable Password Expiration Notifications
Not all users are logged onto the Windows Domain on a regular basis, and may only access the domain occasionally when needed. It is this type of user base which generally has issues where they are not aware their domain account password has expired.
Passwordstate has the ability to send Password Expiration Notifications, on different schedules, at a specific time of the day, and also has a custom email template which can be configured specific to your organization's security policy requirements.
Videos
Add Review
Profile Deletion
Warning message : Are you sure that you want to delete your Prospectwiki account? Please note that there is no option to restore the account or data nor reuse the username once deleted. Your account will be permanently deleted within 2 Working days.
Welcome to Prospectwiki