SecurID^® Discussions

MarcinGryga · ‎2018-06-25

Hi,

I'm new to SecurID. I'm looking for a solution which will provide my endusers (3k) possibility to reset active directory password when they forget it. Is this possible using Authentication Manager and self-service portal?

In AM 8.3 administration guide I have found only information that enduser may be forced to change ldap password, but there is no such option on-demand, so for example user can log in answering security questions and token and then reset AD password.

thanks for any help.

Regards

PiersB · ‎2018-06-26

This is not a current capability of RSA Authentication Manager. This would require that the product's connection to your Active Directory was made from a highly privileged account. When a user authenticates to the Self Service Console, they are authenticating to AD as themselves, not through some generic administrative identity. A user authenticating to the self-service console with their AD password creates a logon security event in the AD event log.

A quick search found a number of Certified Partners that appear to offer that functionality. One example is Zoho ManageEngine ADSelfService Plus - RSA SecurID Access Standard Agent Implementation Guide. This appears to offer the functionality for which you're looking. There are probably others as well, but this was my "first hit".

A colleague (James Mandelbaum) pointed out that this functionality is available in "RSA AM-Prime" from Professional Services. Take a look at the Service Data Sheet - AM Prime.pdf.

View solution in original post

PiersB · ‎2018-06-26

This is not a current capability of RSA Authentication Manager. This would require that the product's connection to your Active Directory was made from a highly privileged account. When a user authenticates to the Self Service Console, they are authenticating to AD as themselves, not through some generic administrative identity. A user authenticating to the self-service console with their AD password creates a logon security event in the AD event log.

A quick search found a number of Certified Partners that appear to offer that functionality. One example is Zoho ManageEngine ADSelfService Plus - RSA SecurID Access Standard Agent Implementation Guide. This appears to offer the functionality for which you're looking. There are probably others as well, but this was my "first hit".

A colleague (James Mandelbaum) pointed out that this functionality is available in "RSA AM-Prime" from Professional Services. Take a look at the Service Data Sheet - AM Prime.pdf.

VT_ChrisV · ‎2020-09-04

Any updates on this solution or content. The document linked is 4 years old. Are there other technology partners or new features within RSA SecureID or Authentication manage offering a SSPR to end users?

JayGuillette · ‎2020-09-04

The only way to achieve an AD password self service reset is through AM Prime with the Self Service Portal, SSP.

https://community.rsa.com/community/products/securid/prime/blog/2019/02/28/prime-101-a-customer-introduction

https://community.rsa.com/community/products/securid/prime

SecurID® Discussions

Active Directory password reset

SecurID^® Discussions