✖

- Related Products
- ADManager Plus

  Active Directory Management & Reporting

  Download | Demo
- ADAudit Plus

  Real-time Active Directory Auditing and UBA

  Download | Demo
- EventLog Analyzer

  Real-time Log Analysis & Reporting

  Download | Demo
- Exchange Reporter Plus

  Exchange Server Auditing & Reporting

  Download | Demo
- AD360

  Integrated Identity & Access Management

  Download | Demo
- Log360

  Comprehensive SIEM and UEBA

  Download | Demo

# Smart Card Authentication

ADSelfService Plus supports smart card authentication, enabling users to securely access the self-service portal without having to enter a password.

ADSelfService Plus authenticates users by comparing the certificate file on their machine with the one in AD. The authenticated users will then be automatically logged in to the ADSelfService Plus web console.

### Prerequisite:

1. Navigate to Admin → Product Settings → Connection. Choose HTTPS Mode radio button, and specify the port number. Click Save.

2. Obtain the CA Root Certificate from a certificate authority (CA). You will need this file while configuring the smart card authenticator, so save it and keep it safe. To download the certificate file from the CA’s website, visit http://<CertificateAuthorityServerName>/certsrv/.

Note:Replace <CertificateAuthorityServerName> in the URL with the name of your certificate server.

###### Follow these steps:

1. Log in to the ADSelfService Plus web console with admin credentials.
2. Navigate to Admin → Customize → Logon Settings.
3. Click the Smart Card Authentication tab.

4. In the Import CA Root Certification field, click Browse to import the required root certification file (X.509 certificate). (Refer step 2 of Prerequisites)
5. In the Mapping Attribute in Certificate field, select a unique attribute in the certificate for mapping.
   - Ensure that a unique attribute from the certificate is mapped to a unique attribute in AD. Both attributes must have the same values.
   - ADSelfService Plus provides the ability to select any attribute of the smart card certificate that uniquely identifies a user. You can choose SAN.OtherName, SAN.RFC822Name, SAN.DirName, SAN.DNSName, SAN.URI, email, distinguishedName, or CommonName. In case other attributes are used to uniquely identify the user in your environment, enter the attribute name in the text box provided and click the + icon.

6. In the Mapping Attribute in AD field, specify the LDAP attribute that should be matched with the specified certificate attribute.

   - Here you need to specify the particular LDAP attribute that uniquely identifies the user in AD (e.g. sAMAccountName).
   - During authentication, ADSelfService Plus reads the value corresponding to the certificate attribute that you specified in the certificate's mapping attribute, and compares it with the specified mapping attribute in AD.
7. In the Linked Domains, select the domains you want to enable smart card authentication for from the drop-down.
8. Click Save
9. Restart ADSelfService Plus for the changes to take effect.

###### Managing smart card authentication configurations:

After you have added a smart card for authentication, you can perform any of the following functions:

- Add a new smart card configuration
- Edit a configured smart card
- Enable or disable a smart card
- Delete a configured smart card

###### Adding a new smart card

- Navigate to Admin → Customize → Logon Settings → Smart Card Authentication.
- Click the Add a New Smartcard button in the top-right corner.
- Enter all the required details and click Save.

###### Editing a configured smart card

- Navigate to Admin → Customize → Logon Settings → Smart Card Authentication.
- Click the pencil icon ( ) corresponding to the smart card whose configuration you wish to edit.
- Modify the settings you wish to change.
- Click Save

###### Enabling/Disabling a configured smart card

- Navigate to Admin → Customize → Logon Settings → Smart Card Authentication.
- To enable or disable a configured smart card, click on the red icon ( ) or green check ( ) icons located in the action column of the particular smart card.

###### Delete a configured smart card

- Navigate to Admin → Customize → Logon Settings → Smart Card Authentication.
- Click the delete icon ( ) on the smart card which you wish to delete.
- Click Yes to confirm the deletion.

## Thanks!

Your request has been submitted to the ADSelfService Plus technical support team. Our technical support people will assist you at the earliest.

#### Need technical assistance?

- Enter your email ID
- Talk to experts

- By clicking 'Talk to experts', you agree to processing of personal data according to the Privacy Policy.

Copyright © 2021, ZOHO Corp. All Rights Reserved.