LTB Self Service Password vs ManageEngine ADSelfService Plus

LTB Self Service Password is a PHP web application that lets users change or reset passwords in LDAP directories, including standard LDAPv3 directories and Active Directory. Password resets can rely on security questions, an emailed token, or SMS through an external Email 2 SMS service or SMS API. Administrators can configure checks for length, character classes, forbidden characters and words, password reuse, entropy and breached-password status using the Have I been pwned API. Other features include CAPTCHA, password-change email notices, and scripts that run before or after a password change. Users can also update their SSH key, email address and phone number in LDAP. A REST API is available. The free, GPL-3.0-licensed software is self-hosted. Documented installation routes include a tarball, Debian or Ubuntu packages, CentOS or Red Hat packages, Docker and Git for developers. Prerequisites include PHP 7.4 or later, required PHP extensions, Smarty 3 or later, configured mail and sessions, and LDAP connectivity. The project directs software questions to its mailing lists and bug reports to GitHub issues.

ManageEngine ADSelfService Plus is an on-premises product for password self-service and Active Directory administration. Its listed functions include delegated administration, AD auditing, and reporting. The software is available for Android, iOS, Linux, macOS, web, and Windows. The Free Edition costs nothing, has no expiration, and covers 50 users, unlimited domains, and 10 Endpoint MFA users. Standard Edition costs $595 a year for 500 users; Professional Edition costs $1,195 a year for 500 users. The listed pricing note describes paid plans from $595/user/yr and a 30-day trial. The product uses a freemium pricing model. ManageEngine was founded in 1996 and is headquartered in Pleasanton, California, USA. Organizations can weigh the free edition's user allowance against their needs and consider the 500-user terms attached to both paid editions.