Secure Self Service Password Reset Software

Yes. FastPass is designed to accommodate AD multi-forest environments, supporting an effectively unlimited number of Active Directory forests.

Yes. FastPass fully supports hybrid architectures, enabling seamless user authentication and password resets across both on-premises Active Directory and Azure Entra.

Yes. FastPass can integrate with RADIUS-based authentication solutions to provide flexible and secure user verification options.

Yes. FastPass can integrate with RSA authentication solutions to provide flexible and secure user verification options.

Yes. FastPass SSPR supports Time-based One-Time Password (TOTP) solutions compliant with RFC 6238, allowing users to authenticate with standard authenticator apps (e.g., Google Authenticator) for secure, multi-factor verification.

Yes. FastPass SSPR supports SAML-based SSO integrations, including Azure Entra (formerly Azure AD). This allows users to authenticate seamlessly with their existing SSO environment for self-service password resets.

Yes. FastPass supports multi-factor authentication (MFA) reset, enabling users to securely reconfigure their MFA settings if they lose access to one of their factors or need to update their authentication methods. The process is initiated via the FastPass self-service portal or IVM, where robust identity verification ensures only authorized users can perform the reset. This integrated feature streamlines recovery while maintaining high security standards, reducing the need for help desk intervention.

Yes. FastPass SSSPR can generate a Temporary Access Pass—a short-lived, time-limited code that grants users temporary access when standard authentication methods aren’t available. After verifying the user’s identity through robust verification processes, FastPass SSPR issues a pass that remains valid only for a predefined period, ensuring secure, controlled access during critical recovery scenarios.

With FastPass a POC can be up and running within a day. With additional target systems (SAP/Oracle etc.) expect to add some more days.

Yes, FastPass provides the functionality to automatically delete user data and restrict access as needed. This is achieved by FastPass regularly checking the source user repository. User data can be set to be automatically deleted under certain conditions, such as if the user account is deleted or disabled, is no longer a member of a group authorized to use FastPass, or becomes a member of a group specifically designated for deletion. This ensures that user data management aligns with the current status and permissions within the organization. Please note that the users history actions are kept in the Audit log.

Yes, FastPass incorporates a feature that leverages the breached password lists from e.g.  Troy Hunt's website, Have I Been Pwned https://haveibeenpwned.com/. These lists are routinely updated on our support site. This feature enables FastPass to alert users and prevent the use of passwords that have been compromised in previous data breaches.

For best practises we recommend configuring FastPass to disallow passwords that appear more than 1000 times in breach incidents. While it's possible to ban all breached passwords, we find that setting a threshold, such as 1000 occurrences, strikes a balance between security and user convenience, preventing overly restrictive password requirements.

Absolutely, FastPass includes a customizable list of prohibited passwords to help enhance security. We provide a top list of commonly used weak passwords that we recommend you utilize as a starting point. Additionally, it's a good practice to expand this list by adding specific terms related to your company, such as the company name, product names, and other relevant terms. This approach helps ensure users avoid common and potentially vulnerable passwords, thereby strengthening overall password security.

Yes, FastPass features a comprehensive and detailed audit log that meticulously records every action. This includes not only user activities but also all operations conducted within the Help Desk tool and the Admin interface. This extensive logging capability ensures thorough tracking and accountability for all interactions within the FastPass system, providing an essential tool for security and administrative oversight.

All personnel supporting FastPass cloud are as a minimum are BPSS checked and are annually trained on Data Protection and personal data best practice. They are also required to sign NDAs and the Information Security Policy and Data Protection policy. These policies are aligned with ISO 27001 / EU GDPR. Read more about GDPR and Service Desk here: Make your Service Desk GDPR Compliant

To integrate FastPass with Entra ID (Azure AD), you need to create an Enterprise Application. This application facilitates the granting of access rights, ensuring FastPass has permissions only to the necessary data fields. This approach helps maintain data security by limiting access strictly to the required information for effective operation.

FastPass's SSPR system is designed with the concept of the Minimum Password Age policy in mind. This policy aims to prevent users from rapidly changing passwords to revert to an old one. By default, FastPass performs a password reset followed by setting the new password as chosen by the user, which may not directly consider the Minimum Password Age policy. However, FastPass includes built-in policies to control the frequency of password resets. We recommend configuring the system to allow up to two password resets per day. This setting is particularly helpful for scenarios where users might forget their newly created password, such as during a lunch break, ensuring they can efficiently manage their accounts without compromising security.

Yes, FastPass is designed for global accessibility, allowing users to connect from anywhere on the internet. However, we also prioritize security and offer a range of customizable access options. These include setting FastPass as an internal-only tool or restricting access to specific countries or through the client. We are committed to helping you find the ideal balance between ease of access and robust authentication methods. Contact us to have a discussion on the options at hand.

FastPass ensures regular updates for optimal performance and security. For the server components, such as the SSPR backend and IVM, we typically release a major version upgrade once a year. Additionally, we provide 2-3 smaller updates annually, focusing on introducing new features and addressing bug fixes. It's important to note that the Windows Client, along with the Password Interceptor and Filter components, are designed to be backward compatible with the latest two major versions. This compatibility feature offers flexibility and ease during the upgrade process, ensuring a smooth transition for users and IT administrators.

FastPass adopts a version-based approach for our End-of-Life policy, focusing on Major and Minor releases. We offer support for the current Major release and the last officially released Major version. For instance, as of now, we support versions 3.6 and 4.0. This means that if you encounter any issues with version 3.6, our support team will assist you, including making necessary fixes to facilitate upgrades. However, we do not provide the same level of support for versions that are two Major releases behind the current one. To ensure continuous support, we recommend upgrading at least once every year, aligning with our Major version release cycle.