🎊 LTB Self Service Password 1.8 released!

ℹ️ LDAP Tool Box Self Service Password is a web application for end users. It allows them to change or reset their password (mail, SMS, questions) if they lost it. It works with any LDAP directory, including Active Directory.

🆕 New features: custom skin, show/hide password

🔗 https://projects.ow2.org/view/ldaptoolbox/ltb-self-service-password-1-8-0-released/

@ow2 @worteks_com

#LDAP #SSPR #Password

Password Resets Expose Vulnerability in Corporate Security

Did you know that password resets can cost companies a whopping $70 each, and with stolen credentials involved in nearly 45% of breaches, it's clear that corporate security is vulnerable to attack.

https://osintsights.com/password-resets-expose-vulnerability-in-corporate-security?utm_source=mastodon&utm_medium=social

#PasswordResets #CredentialTheft #SelfservicePasswordReset #Sspr #HelpdeskSecurity

🔧 Công cụ IT on‑premise mới giúp giảm lượng ticket nhờ: 1️⃣ Tự đổi mật khẩu (SSPR) – người dùng tự thực hiện, không còn yêu cầu reset; 2️⃣ AI chat thu thập log, cung cấp câu trả lời chính xác hơn. Hiện chỉ hỗ trợ Domain on‑premise, sẽ mở rộng cloud dựa trên phản hồi. Mong nhận xét và thử nghiệm! #IT #SSPR #AI #OnPremise #TechVN #CôngNghệ

https://www.reddit.com/r/SaaS/comments/1qn2xz4/i_built_an_onpremise_tool_to_reduce_ticket_volume/

there is always going to be a subset of users for which self service password recovery using their 2FA codes is too harrowing an experience.

The bigger question is why the helpdesk keeps sending these users to me

#tech #sysadmin #SSPR #passwords #security #MFA #2FA #helpdesk #azure #entra #buttonsarehard

𝗛𝗼𝘄 𝘁𝗼 𝗱𝗶𝘀𝗮𝗯𝗹𝗲 𝗦𝗲𝗹𝗳-𝗦𝗲𝗿𝘃𝗶𝗰𝗲 𝗣𝗮𝘀𝘀𝘄𝗼𝗿𝗱 𝗥𝗲𝘀𝗲𝘁 𝗳𝗼𝗿 𝗮𝗱𝗺𝗶𝗻𝗶𝘀𝘁𝗿𝗮𝘁𝗼𝗿𝘀 𝗶𝗻 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗘𝗻𝘁𝗿𝗮 𝗜𝗗

Self-service password reset can be a useful feature that allows users to access their account in case they forget their password.

On the other hand, it is potentially risky, as a potential attacker may target the self-service password reset feature to gain access to the account. Especially for privileged accounts, this is very risky and therefore I would generally recommend disabling self-service password resets for privileged accounts.

📺 Watch my YouTube video bellow 👇 👇
https://youtu.be/KIlRPx_9XRA

#cswrld #videotutorial #sspr #passwordreset #entraid #administrators

🆕 LDAP Tool Box Self Service Password 1.7.3 released!

ℹ️ LDAP Tool Box Self Service Password is a web application for end users. It allows them to change or reset their password (mail, SMS, questions) if they lost it. It works with any LDAP directory, including Active Directory.

🔗 News on OW2 : https://projects.ow2.org/view/ldaptoolbox/ltb-self-service-password-1-7-3-released/

🔗 Release on GitHub : https://github.com/ltb-project/self-service-password/releases/tag/v1.7.3

🔗 Download : https://ltb-project.org/download.html

#LDAP #SSP #SSPR #OpenLDAP #ActiveDirectory #OpenSource #FreeSoftware #IAM

The whole login loop issue in #entraid when migrating authentication policies sends me spare 😂

I thought it was down to #sspr not supporting #fido, but thought it was fixed.

🎇 Self Service Password 1.7.2 released!

ℹ️ LDAP Tool Box Self Service Password is a web application for end users. It allows them to change or reset their password (mail, SMS, questions) if they lost it. It works with any LDAP directory, including Active Directory.

📃 This verson provides some fixes on captcha, SMS reset and docker image.

➡️ https://projects.ow2.org/view/ldaptoolbox/ltb-self-service-password-1-7-2-released/

#LDAP #LTB #LDAPToolBox #SSP #SSPR @ow2 #PHP #OpenSource #FreeSoftware #LogicielLibre

Did you know that self-service password reset (#SSPR) is enabled by default for privileged users and does not respect the SSPR settings in Microsoft Entra portal?

Self-service password reset can be a useful feature that allows users to access their account in case they forget their password, or the account is locked.

On the other hand, it is potentially risky, as a potential attacker may target the self-service password reset feature to gain access to the account. Especially for privileged accounts, this is very risky and therefore I would generally recommend disabling self-service password reset for privileged accounts.

https://www.cswrld.com/2024/11/how-to-disable-self-service-password-reset-for-administrators/