Helpdesk Module
The MyPass Helpdesk Module is built for internal quick-support scenarios — IT teams, school teachers, departmental administrators — anyone who needs to reset a password or unlock an account without direct access to Active Directory. One central, audited tool that abstracts the account from the underlying system.
Two Scenarios. Two Tools.
MyPass has two distinct tools for helpdesk identity scenarios. The Helpdesk Module is for internal quick-support. For inbound external callers and full ITSM-embedded verification, IVM is the right choice.
The Security Problem
Attackers don't need to crack your firewall. They call your helpdesk. They have a name, a manager's name, a recent ticket number — harvested from LinkedIn, data leaks, and org charts. They sound stressed. They sound convincing. Your agent is under queue pressure and wants to help.
69% of IT departments report vishing attempts — voice-based social engineering specifically targeting service desk staff. Traditional verification methods — static security questions, caller ID checks, agent judgment — were not designed to resist this. They fail because agents are human.
The Helpdesk Module removes the dependency on agent judgment. The system controls what can and cannot happen. The agent follows a defined process — and the log shows they did exactly that.
"A hacker calls your service desk. They know your manager's name. They have a recent ticket number. They sound exactly like a frustrated employee. How confident are you in your agent's next decision?"
— FastPassCorp security research
What It Does
The Helpdesk Module gives support staff a controlled, role-scoped interface to manage accounts and credentials — with no direct directory access and a complete audit trail on every action.
Reset passwords and unlock accounts across AD, SAP, Oracle, IBM, and connected systems — without the support agent needing any directory permissions. MyPass handles the underlying operation centrally.
Each support role only sees the accounts within their scope. A teacher sees their class. A floor admin sees their department. IT sees their tier. No access creep. No accidental exposure.
Every reset, every unlock, every action — logged with who, when, what, and why. Tamper-evident records support POPIA compliance, internal audit, and incident investigation.
One console covers Active Directory, SAP, Oracle, IBM, and every other connected system configured via Password Sync — the agent never needs to know which underlying system they're working with.
Purpose-built for scenarios where non-IT staff support accounts — teachers in schools, team leaders in call centres, departmental coordinators in large enterprises. No AD training required.
Agents never see or hold credentials. The system performs the reset and delivers access back to the user directly. Separation of duties enforced by architecture, not policy.
Why Traditional Verification Fails
What Good Looks Like
Effective helpdesk security requires that the workflow — not the agent — controls what happens. NIST, ISO/IEC 27001, PCI DSS, and CISA guidance all point to the same principle: separation of duties means the system issues credentials, not the human handling the call.
Integrations
The Helpdesk Module integrates with your existing ITSM and directory environment — no new tooling required for agents.
Need structured caller verification with full ITSM ticket enrichment and MFA-backed workflows?
That's IVM — explore it here →Audit & Compliance
When an incident is investigated, the log shows exactly what happened — who initiated the reset, which verification was completed, what action was taken, and when. The record protects your organisation and protects your support staff.
Every reset and unlock logged — who, when, which account, which system, what outcome. Tamper-evident and always available for audit.
Supervisor alerts on any out-of-scope action or policy deviation. Real-time escalation before problems compound.
Exportable reports for POPIA, internal audit, and ISO 27001 controls. Demonstrate a consistent, documented support process across every interaction.
FAQ