The Premier SAP Self-Service Password Reset Tool -SSPR

The total process for a self-service password reset towards SAP in FastPass typically takes just under one minute. The initial authentication phase, especially when using a Windows Password, is usually very quick. For other methods like TOTP or SMS, the average time is around 30 seconds. The subsequent step of choosing a new password for SAP takes, on average, about 25 seconds. Therefore, the entire transaction is completed in under a minute.

Yes, FastPass features a comprehensive Password Policy engine that can not only mimic SAP's password policies but also strengthen them. It includes options like banning the top 1000 commonly used weak passwords often targeted in spray attacks. Additionally, FastPass allows for the exclusion of the most breached passwords. It also supports complex history rules, such as requiring a certain number of different characters from the user's previous passwords, further enhancing password security.

Yes, FastPass has a user mapping engine for that exact purpose. Usually this is the case, either for some or all users. Sometimes we can make the mapping manually using Active Directory data, a different field, email address, UPN name or parts of the SAMAccountname. In other cases we get data from an Identity System and in yet other cases we get data from SAP and map on e.g. Email address. Contact us to find the right solution.

FastPass allows for customized settings to target multiple systems simultaneously, depending on user group membership and user mapping engine. Some users can set the same password for all systems in a single action, and even for multiple accounts on those systems if needed. However, for users like administrators, there might be a need to set different passwords for each production system individually. This ensures enhanced security, particularly in environments where distinct passwords for each system are crucial.

From a technical standpoint, FastPass is capable of handling password resets for multiple systems simultaneously, even allowing the same password to be set across these systems. This includes aligning with a Password Policy that suits all systems involved. However, whether to use the same password for all systems is largely a security decision. If it's deemed secure, FastPass can facilitate this unified reset process.

Can The FastPass Sync engine is built for load, spawning out multiple threads to handle load. We have customers with over 95 target systems (typically this is having FastPass handling the whole landscape, Sandbox, Development, Test, QA and Production).

FastPass is configured to unlock SAP accounts by default, but this applies specifically to accounts locked due to multiple failed password attempts – uflag is 128. However, if an account is locked for administrative reasons, FastPass will not alter this status and will leave the account administratively locked. This ensures that FastPass respects and maintains the intentional security measures set by administrators.

FastPass offers versatile authentication solutions tailored to group membership, such as those in Active Directory or Entra ID (Azure AD), and based on network location. For instance, employees accessing from the internal network may require Multi-Factor Authentication (MFA), while those connecting from external networks need additional Manager Approval for secure verification. This flexibility allows for creating robust password reset processes for different user groups. Discover more about integrating Manager Approval in password self-service here.https://www.fastpasscorp.com/blog/manager-approval-in-password-self-service/

To combat social engineering attacks, FastPass SSPR has robust security protocols in place. When a user answers Challenge Response questions, FastPass monitors the number of incorrect attempts. By default, a user's account is locked after three unsuccessful attempts. This lock can be lifted either through intervention by the Service Desk or by the user completing a re-enrollment process. This measure significantly reduces the risk of unauthorized access through social engineering tactics.

Yes, FastPass is designed for global accessibility, allowing users to connect from anywhere on the internet. However, we also prioritize security and offer a range of customizable access options. These include setting FastPass as an internal-only tool or restricting access to specific countries or through the client. We are committed to helping you find the ideal balance between ease of access and robust authentication methods. Contact us to have a discussion on the options at hand.

FastPass's Self-Service PC Client is fully compatible with Windows 10 and Windows 11, while legacy support is available for Windows 7 in older versions of the software. For Bring Your Own Device (BYOD) scenarios and browser use, our client features a responsive design that adapts seamlessly to a wide range of devices, ensuring a smooth user experience across different platforms.

Yes, the password set by FastPass will be productive., unless you choose not to.