ManageEngine, the enterprise IT management division of Zoho Corporation, today announced that ADSelfService Plus, its integrated Active Directory (AD) self-service password management and single sign-on solution, now supports two-factor authentication (2FA) for macOS systems. With this feature, organizations can secure their macOS endpoints with an additional layer of authentication.
Passwords are the first, and for many organizations, the only line of defense protecting sensitive and privileged resources from unauthorized access. However, users often create and reuse weak passwords across critical enterprise accounts, making these accounts easy targets for cyber criminals. Enabling 2FA protects network resources against unauthorized access by double checking user identities, requiring both a traditional username/password combination and a second authentication factor, such as a one-time password (OTP), sent via email or SMS.
“Though two-factor authentication is widely accepted as a method to ensure user logon security, macOS does not provide a way to enable this feature for the domain computers,” says Parthiban Paramasivam, director of product management, ADSelfService Plus. “The latest version of ADSelfService Plus helps IT teams secure user logons by offering two-factor authentication for macOS systems.”
ADSelfService Plus’ 2FA for macOS Logons
With 2FA enabled, users have to successfully authenticate themselves twice to access their macOS machines. Users are authenticated first through their Active Directory domain credentials, and next through one of the supported authentication techniques.
ADSelfService Plus supports SMS or email-based OTPs, DUO Security (via phone call or push notifications), RSA SecurID, RADIUS, security questions and answers, Google Authenticator, fingerprint authentication, QR-code based authentication and time-based one-time passwords (TOTPs) as second factors of authentication for macOS logons.
Other highlights of ADSelfService Plus’ 2FA for macOS logons include:
- 2FA at the granular level: ADSelfService Plus offers the ability to configure 2FA based on domain, OU or group memberships. This allows admins to enforce second factors of authentication based on users’ privileges.
- Compliance with regulatory mandates: ADSelfService Plus’ macOS 2FA helps organizations meet compliance mandates of NIST SP 800-63B, NYCRR, FFIEC, GDPR and HIPPA.
Pricing and Availability
Pricing for ADSelfService Plus starts at USD $1,195 annually. A fully functional, 30-day trial version is also available for download at https://zurl.co/pU59.
ADSelfService Plus is free for up to 50 users. The Free edition supports all the features of the Professional edition, including macOS/Windows 2FA, single sign-on and password self-service. It can be downloaded at https://zurl.co/Slny.
About ADSelfService Plus
ManageEngine ADSelfService Plus is an integrated Active Directory self-service password management and single sign-on solution. It offers password self-service, password expiration reminders, a self-service directory updater, a multi-platform password synchronizer and single sign-on for cloud applications. ADSelfService Plus also offers both Android and iOS mobile apps to facilitate self-service for end users anywhere, at any time. ADSelfService Plus supports IT help desks by reducing password reset tickets and spares end users the frustration caused by computer downtime. For more information about ADSelfService Plus, visit manageengine.com/products/self-service-password.
ManageEngine is the enterprise IT management division of Zoho Corporation. Established and emerging enterprises — including 9 of every 10 Fortune 100 organizations — rely on our real-time IT management tools to ensure optimal performance of their IT infrastructure, including networks, servers, applications, desktops and more. We have offices worldwide, including the United States, the Netherlands, India, Singapore, Japan, China and Australia as well as a network of 200+ global partners to help organizations tightly align their businesses and IT. For more information, please visit www.manageengine.com; follow the company blog at blogs.manageengine.com and on LinkedIn at www.linkedin.com/company/manageengine, Facebook at www.facebook.com/ManageEngine and Twitter @ManageEngine.