LTB Self Service Password vs One Identity Active Roles

LTB Self Service Password is a PHP web application that lets users change or reset passwords in LDAP directories, including standard LDAPv3 directories and Active Directory. Password resets can rely on security questions, an emailed token, or SMS through an external Email 2 SMS service or SMS API. Administrators can configure checks for length, character classes, forbidden characters and words, password reuse, entropy and breached-password status using the Have I been pwned API. Other features include CAPTCHA, password-change email notices, and scripts that run before or after a password change. Users can also update their SSH key, email address and phone number in LDAP. A REST API is available. The free, GPL-3.0-licensed software is self-hosted. Documented installation routes include a tarball, Debian or Ubuntu packages, CentOS or Red Hat packages, Docker and Git for developers. Prerequisites include PHP 7.4 or later, required PHP extensions, Smarty 3 or later, configured mail and sessions, and LDAP connectivity. The project directs software questions to its mailing lists and bug reports to GitHub issues.

One Identity Active Roles is a paid administration and governance product for Microsoft Active Directory, Entra ID, and Microsoft 365. A unified console brings those environments into one interface, while workflow automation helps implement and enforce consistent policies. Lifecycle management uses automation and scripting to support least-privilege accounts. Role-based access control enables fine-grained delegation across Active Directory domains and Entra ID and Microsoft 365 tenants. Change history and activity tracking support audits and remediation. Listed integrations include One Identity Manager, Safeguard Authentication Services, Defender, Change Auditor, GPO Admin, Password Manager, and Starling Connect. Supported platforms are web, iOS, Android, and self-hosted virtual or physical appliances; the installation guide describes on-premises requirements. A license must be purchased for legal use, and the fee depends on the number of managed users. Pricing is on request. There is no free plan, but the product page offers a free trial and a virtual trial. Listed capabilities include delegated administration, AD auditing, lifecycle automation, and reporting; password self-service is not included.