Feature Request

TL;DR: Please allow **“Send Copy” for password/credential entries to be sent to arbitrary external email addresses, even when the recipient does not have a Devolutions account. This would be especially useful for MSPs when securely sharing credentials with customers or external service providers. Existing security features such as expiration, revocation, permissions and audit logging should remain available. Description We would like to request an enhancement to the “Send Copy” functionality for password/credential entries in Devolutions Hub. Currently, when using “Send Copy” on a password entry, it appears that the recipient must have an existing Devolutions account / be an internal user. Sending a copy directly to an arbitrary external email address is not possible. For MSPs and IT service providers, there are many legitimate use cases where credentials need to be securely shared with external parties who do not have a Devolutions account. Example use case An IT service provider stores a customer's credentials in Devolutions Hub. The customer asks for a specific password or credential, or an external service provider needs temporary access information. The desired workflow would be: Password Entry → Send Copy → External Email Address → Send For example: admin@customer.com The recipient should be able to receive and access the shared credential without having to create a Devolutions account. Suggested functionality Allow users with the appropriate permissions to enter any valid email address in the “Send Copy” recipient field, including addresses that are not associated with a Devolutions account. Ideally, the existing security mechanisms should remain in place, for example: Secure sharing of the credential rather than sending the password as plain text Optional expiration of the shared copy Ability to revoke access where applicable Audit logging of who shared which credential and with whom Respecting the existing permissions of the user sending the credential Optional additional authentication / verification for external recipients The feature could potentially use the existing Devolutions Send mechanism for external recipients, if technically appropriate. Why this would be valuable This would be particularly useful for MSPs, IT service providers and companies working with external contractors, customers and third-party service providers . Creating a Devolutions account for every external recipient is often impractical, especially when credentials only need to be shared once or very occasionally. The ability to securely share a specific credential with an external email address would make the existing “Send Copy” functionality considerably more useful while still allowing Devolutions to maintain appropriate security controls and auditability. Thank you for considering this feature request. Best regards Julian

I miss the cli integration which I used have in 1password in my previous job. The opensource system "secretspec" https://secretspec.dev/ , gives all the same features, but for many different password manager backends. However, devolutions is not suppported. See this video: Secure Declarative Secrets With SecretSpec | dotenv Files On Steroids And the repo: cachix/secretspec: Declare secrets once. Store them anywhere. My feature request is that you add devolutions support to secretspec: See: Adding a New Provider | SecretSpec

Hi, same thing that has been requested for remote desktop manager in this thread: Use Remote Desktop Manager with Azure AD App Proxy Pre Auth and Devolution Password Server (devolutions.net) This works if azure application proxy is in pass thru mode, but not if pre authenticated is enabled.

Good evening, folks... Do you know how awesome it would be, if we could have something that when entries appear that have absolutely nothing to do with the URL being visited we could mark invalid or not appropriate or something? These two below, the 1st one is spot on with the URL I am visiting. The 2nd one there is no trace, no verbiage, or no settings with the 1st URL in it, but yet it still appears. I have this quite often, where wrong entries appear, so this would be extremely helpful! [image]

Our finance team has requested the following for Credit Card details stored in RDM and DPM. The ability to select some fields not hidden by default. Fields include: Credit Card Number Valid From date - if used Valid To date - if used The ability to set this by policy for certain groups would be ideal.

When creating a new item in DPM, the folder selection becomes an issue when there are more than one folder with the same name. Please see image. [image] Having a folder tree when selecting would make certain that the item is being created in the correct subfolder. e.g. Folder > Subfolder > Subfolder... Specific example would be: DevOps > AD Accounts > Service Accounts This would allow correct selection of folder when multiple folders are named the same.

We are using different Password vaults for different Tiering levels. Source is dvls: We have set a password policy for every vault: [image] When adding a new credential entry in devolutions password manager, it does not show the correct policy set for the vault: (yes, i know that clicking on the three dots - Generate from policy and selecting policy works, but when policy is shown on click into field it should be the correct one) [image] Thats extremly confusing for users, because they click on create a new password and get an error afterwards because the password does not match the password policy. The error is even more confusing: [image] The user should get feedback why an error occured (for example password does not meet password policy), not just an error occured.(like when using a pwned password) Thank you!

When we search for a Website to login in the webbrowser plugin, it not only shows Websites, but also credentials which have no website to login at all. Credential entries can't be used at all in the Webbrowser, so I wonder if they can be filtered as default, or an option to only show Web-Entries and nothing else from the DVLS/RDM database.

Up until now our company has used RDM exclusively, however since not every user needs to full feature set were are migrating some of them to DPM. During that we found that the way the login and token work is different between RDM and DPM. As such we had to increase our token lifetime so DPM users that did not use the application every day had to reconnect to the datasource. This would not be needed if DPM had a login like RDM does and in my opinion it would make the user experience between the 2 applications more consistant. We are using our own DVLS as a datasource.

Create a permission report not only on vaults but on folders, subfolders and entries it contains. Currently it is possible to have a permission report for a vault and you have to manually go through each of the folders, subfolders and entries to know which permissions apply. It is sometimes necessary to create granular permissions and having a report to see who has access to what would be very appreciated. In addition, at the security level, this report would allow you to correct errors without having to open each of the entries.

At the moment there is no way to enforce the clearing of clipboard function in the workspace app. We would like to be able to enforce it the same way you are able to do so as for example the use of biometric locking.

[image] Depuis l'application Workspace connecté à un serveur Devolution, il est impossible d'ajouter des éléments depuis un modèle. Alors que depuis la page web du serveur Devolution, il est possible de le faire. (voir pièces jointes). [image]

Hello Devolutions-Team, we are currently managing the deployment of the Devolutions Password Manager in our environment. I would like to submit a feature request: Would it be possible to implement the "Custom Installer" tool for Devolutions Password Manager, similar to the one already available in Remote Desktop Manager (found under Tools -> All Tools -> Custom Installer)? [image] Currently, we rely on the deployment via the DEPLOY_CONFIG property and a separate .cfg file. However, in our deployment environment (Matrix42 with neo42 PSADT), this method has proven to be unreliable and difficult to manage compared to a pre-configured installer. Having the ability to bake the configuration directly into a custom MSI or executable would significantly simplify our deployment workflow. We would be very happy to see this feature added :) Best regards Marc

CLIENT REQUEST We publish Devolutions Server through Azure Application Proxy with Microsoft Entra ID pre-authentication. The Devolutions Password Manager browser extension periodically shows "Unable to refresh token" or "Token expired." Investigating with dev tools, we found that API calls from the extension (e.g. to /api/public-instance-information) get redirected (HTTP 302) to the Microsoft login page instead of returning JSON. The extension then fails trying to parse the HTML login page as JSON. A manual sign-in to the Devolutions Server URL in the same browser profile works around it temporarily. Is this a known limitation, and could official support be added for this authentication flow (Entra ID pre-auth via Azure App Proxy) so the extension can handle the redirect itself, or at least fail gracefully and prompt for re-authentication instead of erroring out?

Dear Development Team, More and more websites use separate login providers or dedicated login URLs. Currently, in the Devolutions Password Manager browser extension, a website entry can only handle a single URL, which makes it difficult to match these scenarios. It would be very helpful to have the ability to add and manage multiple (or equivalent) URLs for a single website entry. Best regards Roman Eglin

I visit a site that asks for a passkey (login.microsoft.com). My passkey is stored in Windows Hello, so I want to skip the empty passkey prompt from Devolutions Workspace. [image] In Bitwarden I can have it always skip for a specific site. [image] I would like this option in Devolutions Workspace. I have tried adding the URL to the Never list, but this doesn't have any effect on passkeys. [image] I have also tried configuring a GPO to block the extention site access on login.microsoft.com, but this doesn't help, because the extension has the permission Read and change all your data on all websites GPO name: Configure extension management settings Value: {"ddloeodolhdfbohkokiflfbacbfpjahp":{"installation_mode":"force_installed","runtime_blocked_hosts":["*://login.microsoft.com/*"]}}

Hello. When Devolutions Server has an open session in the same browser (not in private), the browser extension should use that session to login itself. I know it's possible, because Delinea does that with their Secret Server. Also, if RDM needs to log in, and a session is open with DVLS Server in the same browser, it should use that session. Thank you. Best regards. Marcel

It would be great if website passwords could be changed easily, as it's currently very confusing and not straightforward. Thank you.

Is it possible to make password creation adhere to the default password policy defined on the Devolutions server? This works OK on the browser plugin, but in the app it seems to be up to the end user.

We use ZTNA to authenticate connections to our Devolutions server over the WAN. This works fine with both RDM and the web GUI, however, the Workspace App seems to require a VPN connection - there is no way to choose or set the ZTNA certificate to allow the connection. Is this something that is on the roadmap?

Hey, we are currently in the process of migrating from Netwrix to Devolutions and are overall very satisfied with the platform. However, there is one feature we are currently missing that would significantly improve usability in our daily workflows. In Netwrix, it is possible to use keyboard shortcuts to quickly copy the username, password, or both at once. This allows for a much faster and more efficient handling of credentials, especially when working with multiple systems. At the moment, Devolutions does not seem to offer a comparable shortcut-based functionality for copying credentials. Feature request: We would like to request the addition of configurable keyboard shortcuts for: Copying the username Copying the password Optionally copying both username and password together This feature would greatly enhance productivity and streamline workflows, particularly for administrators who frequently need to access and use credentials. Thank you for considering this request. Please let us know if further details or use cases would be helpful. [image]

Using both Workspace for Windows and Workspace Edge extension. The Edge extension is way easier, though not used much because of the lack of information. Having many OTP for the same system, though different usernames, does the naming difficult and long. I'd rather not name all with username. This way an account will be named "System | Company | Long username". It would be very helpful, if the Edge extension has the account information as well. [image] [image]

Hi, We're using RDM in our company with a Devolutions Server as the database and just discovered that there is a Workspace app. We have shortcuts for every website, and the logins to these websites are secured with an OTP tokens. However, it is currently not possible to copy the OTP token directly from a website shortcut. We'd like to be able to copy the OTP tokens directly from the shortcut. Additionaly, it would be appreciated if we could create a website shortcut and link an existing OTP token that is stored in a password list (instead of requiring a standalone OTP token entry). Best regards!

We as an IT company have many many users that use the clipboard history. Sadly devolutions workspace and if i am not mistaken also RDM dont actually delete te clipboard entries like for example keepass or keepass XC does. It simply just puts in a blank. Yes that does clear clipboard if you dont use the clipboard history but it should just be able tot delete the history. Me as an IT technician but even more our security department would really like to se proper clipboard entry deletion as feature in all devolutions server associated applications! If you have any questions let me know. [image]

When I want to review a password from a record's password history, I need a button that allows me to copy it, not just view it, or a button to restore it.