LTB Self Service Password vs ManageEngine AD360

LTB Self Service Password is a PHP web application that lets users change or reset passwords in LDAP directories, including standard LDAPv3 directories and Active Directory. Password resets can rely on security questions, an emailed token, or SMS through an external Email 2 SMS service or SMS API. Administrators can configure checks for length, character classes, forbidden characters and words, password reuse, entropy and breached-password status using the Have I been pwned API. Other features include CAPTCHA, password-change email notices, and scripts that run before or after a password change. Users can also update their SSH key, email address and phone number in LDAP. A REST API is available. The free, GPL-3.0-licensed software is self-hosted. Documented installation routes include a tarball, Debian or Ubuntu packages, CentOS or Red Hat packages, Docker and Git for developers. Prerequisites include PHP 7.4 or later, required PHP extensions, Smarty 3 or later, configured mail and sessions, and LDAP connectivity. The project directs software questions to its mailing lists and bug reports to GitHub issues.

ManageEngine AD360 is an identity and access management suite for administering Windows Active Directory, Exchange Server and Microsoft 365 through a single web-based console. Its components cover identity lifecycle tasks, password self-service, authentication, auditing, Microsoft 365 management and backup. ADManager Plus automates user lifecycle workflows and reporting; ADSelfService Plus provides password tools, single sign-on, multifactor authentication and adaptive, risk-based conditional access. ADAudit Plus tracks policy changes, logins, lockouts and potential insider threats. M365 Manager Plus reports on and monitors Microsoft 365 services, while Recovery Manager Plus backs up and restores Active Directory, Azure AD, Office 365 and Exchange environments. AD360 includes audit reports mapped to SOX, HIPAA, PCI-DSS, GDPR, FISMA and GLBA requirements. The suite supports hybrid deployment and delegated administration, and is listed for web and Windows. Its download is a fully functional 64-bit Windows executable with technical support during a 60-day trial. There is no free plan. Listed component plans are priced on request, with coverage depending on the component.