SSRPM

Securely Reset Your Own Password

Self-Service Reset Password Management (SSRPM) enables end users to securely reset their own password using a code or by answering personal security questions.

Want to Reduce Password Reset Calls

With a single click, users can reset their own password without help from the helpdesk. The button is seamlessly integrated into the sign-in screen. This results in fewer calls.

…with Minimal Effort

Thanks to its simple implementation, SSRPM is fully operational in less than 2 hours. With SSRPM, end users can reset their Active Directory password themselves, 24 hours a day, 7 days a week, from any device.

…and Reporting Capabilities

Which password resets have been performed, and where has password misuse occurred? Reports can be generated automatically and made available or emailed to the security officer.

Ask a question?

The SSRPM Basic module provides the core functionality end users need to reset their passwords and unlock their accounts on their own, without helpdesk intervention.

Reset Your Password in Three Simple Steps

First, the user clicks the 'Forgot password' button. Step two is answering a set of security questions or entering a PIN code sent by phone or email. The final step is resetting the password. That is all.

Lower Helpdesk Workload

Because end users can reset their passwords themselves via a button on their sign-in screen (Windows 10 or later, Outlook Web Access, Citrix, etc.), the helpdesk workload decreases significantly.

Secure and Reliable

Security is a guiding principle across the IT landscape for many organizations. SSRPM addresses this with a secure, reliable web-based self-service solution for end users, with security levels ranging from weak to strong that can be configured.

This module provides two-factor authentication. When a user wants to reset a password with SSRPM, SSRPM sends a PIN code by SMS to the user's mobile phone and or by email to an alternate email address.

Two-factor Authentication (2FA)

By using a phone and or an alternate email address, a second factor is introduced to gain access. The employee must know something (username and password) and have something (a phone).

Additional Security Layer

Cyber threats are present every day. Many organizations now recognize that two-factor authentication (2FA) is no longer optional for information security but a must-have.

A Step Toward Compliance

The GDPR requires you to implement a system that optimizes control over certain data. 2FA is a necessary step for compliance when protecting sensitive data such as personally identifiable information.

This module was developed for helpdesk staff verify a caller's identity. To identify the caller, the helpdesk employee asks a security question.

Direct Contact with a Helpdesk Employee

No matter how many tools you use to reduce calls to the helpdesk, there are always situations where end users still call. For example, when a user has a low IT skill level and is not accustomed to using self-service.

Who Is On The Line?

Through an intelligent mechanism combined with reversible encryption, the helpdesk employee can see only parts of the answer. This keeps privacy-sensitive answers hidden, while still allowing verification that the caller is who they claim to be.

Secure Password Reset

After the answers are validated, the helpdesk employee can be certain the caller is who they claim to be. The caller can then be assisted quickly and securely.

With Active Directory Self-Service, end users can modify specific attributes in Active Directory themselves. The administrator determines which attributes the end user may change or view.

Data Always Up to Date

Because end users can do more themselves, data in Active Directory remains up to date. The end user signs in to the SSRPM portal and then sees which fields can be modified, including uploading a photo.

Countermeasure Against Social Engineering

Self-service reduces social engineering attacks at the helpdesk. For example, calls where an intruder poses as the intended victim, claims to have forgotten the account password, and asks for a new password.

Higher Employee Satisfaction

Allowing employees to enter certain attributes themselves helps prevent errors. In addition, these administrative tasks are removed from the helpdesk. This means no more long wait times at the helpdesk, lower service desk costs, and satisfied end users.