Ithicos Directory Manager vs LTB Self Service Password

Ithicos Directory Manager is a web-based delegated administration tool for authorized staff managing Active Directory accounts. Delegates can edit contact fields, titles, departments, and custom properties, then reset passwords, unlock accounts, enable or disable accounts, and set expiration dates. The Advanced edition adds template-based user creation, delegated group management, and soft or hard deletion workflows that disable accounts and remove group access. Administrators can enforce required inputs, regular-expression rules, dropdowns, address sets, and cascading subsets. Searches and filtered user lists export to CSV or Excel. User photos can be uploaded to local Active Directory and Microsoft 365 profile pictures. Custom PowerShell scripts can run after profile or account changes, while timestamps and CSV audit records support auditing. Version 3.5 adds Secure LDAP for encrypted connections. It runs on premises on 64-bit Windows Server with IIS and .NET Framework 4.8. Evaluation builds are fully functional for 30 days.

LTB Self Service Password is a PHP web application that lets users change or reset passwords in LDAP directories, including standard LDAPv3 directories and Active Directory. Password resets can rely on security questions, an emailed token, or SMS through an external Email 2 SMS service or SMS API. Administrators can configure checks for length, character classes, forbidden characters and words, password reuse, entropy and breached-password status using the Have I been pwned API. Other features include CAPTCHA, password-change email notices, and scripts that run before or after a password change. Users can also update their SSH key, email address and phone number in LDAP. A REST API is available. The free, GPL-3.0-licensed software is self-hosted. Documented installation routes include a tarball, Debian or Ubuntu packages, CentOS or Red Hat packages, Docker and Git for developers. Prerequisites include PHP 7.4 or later, required PHP extensions, Smarty 3 or later, configured mail and sessions, and LDAP connectivity. The project directs software questions to its mailing lists and bug reports to GitHub issues.