Feature Request

I miss the cli integration which I used have in 1password in my previous job. The opensource system "secretspec" https://secretspec.dev/ , gives all the same features, but for many different password manager backends. However, devolutions is not suppported. See this video: Secure Declarative Secrets With SecretSpec | dotenv Files On Steroids And the repo: cachix/secretspec: Declare secrets once. Store them anywhere. My feature request is that you add devolutions support to secretspec: See: Adding a New Provider | SecretSpec

When we search for a Website to login in the webbrowser plugin, it not only shows Websites, but also credentials which have no website to login at all. Credential entries can't be used at all in the Webbrowser, so I wonder if they can be filtered as default, or an option to only show Web-Entries and nothing else from the DVLS/RDM database.

Up until now our company has used RDM exclusively, however since not every user needs to full feature set were are migrating some of them to DPM. During that we found that the way the login and token work is different between RDM and DPM. As such we had to increase our token lifetime so DPM users that did not use the application every day had to reconnect to the datasource. This would not be needed if DPM had a login like RDM does and in my opinion it would make the user experience between the 2 applications more consistant. We are using our own DVLS as a datasource.

Create a permission report not only on vaults but on folders, subfolders and entries it contains. Currently it is possible to have a permission report for a vault and you have to manually go through each of the folders, subfolders and entries to know which permissions apply. It is sometimes necessary to create granular permissions and having a report to see who has access to what would be very appreciated. In addition, at the security level, this report would allow you to correct errors without having to open each of the entries.

At the moment there is no way to enforce the clearing of clipboard function in the workspace app. We would like to be able to enforce it the same way you are able to do so as for example the use of biometric locking.

[image] Depuis l'application Workspace connecté à un serveur Devolution, il est impossible d'ajouter des éléments depuis un modèle. Alors que depuis la page web du serveur Devolution, il est possible de le faire. (voir pièces jointes). [image]

Hello Devolutions-Team, we are currently managing the deployment of the Devolutions Password Manager in our environment. I would like to submit a feature request: Would it be possible to implement the "Custom Installer" tool for Devolutions Password Manager, similar to the one already available in Remote Desktop Manager (found under Tools -> All Tools -> Custom Installer)? [image] Currently, we rely on the deployment via the DEPLOY_CONFIG property and a separate .cfg file. However, in our deployment environment (Matrix42 with neo42 PSADT), this method has proven to be unreliable and difficult to manage compared to a pre-configured installer. Having the ability to bake the configuration directly into a custom MSI or executable would significantly simplify our deployment workflow. We would be very happy to see this feature added :) Best regards Marc

CLIENT REQUEST We publish Devolutions Server through Azure Application Proxy with Microsoft Entra ID pre-authentication. The Devolutions Password Manager browser extension periodically shows "Unable to refresh token" or "Token expired." Investigating with dev tools, we found that API calls from the extension (e.g. to /api/public-instance-information) get redirected (HTTP 302) to the Microsoft login page instead of returning JSON. The extension then fails trying to parse the HTML login page as JSON. A manual sign-in to the Devolutions Server URL in the same browser profile works around it temporarily. Is this a known limitation, and could official support be added for this authentication flow (Entra ID pre-auth via Azure App Proxy) so the extension can handle the redirect itself, or at least fail gracefully and prompt for re-authentication instead of erroring out?

Dear Development Team, More and more websites use separate login providers or dedicated login URLs. Currently, in the Devolutions Password Manager browser extension, a website entry can only handle a single URL, which makes it difficult to match these scenarios. It would be very helpful to have the ability to add and manage multiple (or equivalent) URLs for a single website entry. Best regards Roman Eglin

I visit a site that asks for a passkey (login.microsoft.com). My passkey is stored in Windows Hello, so I want to skip the empty passkey prompt from Devolutions Workspace. [image] In Bitwarden I can have it always skip for a specific site. [image] I would like this option in Devolutions Workspace. I have tried adding the URL to the Never list, but this doesn't have any effect on passkeys. [image] I have also tried configuring a GPO to block the extention site access on login.microsoft.com, but this doesn't help, because the extension has the permission Read and change all your data on all websites GPO name: Configure extension management settings Value: {"ddloeodolhdfbohkokiflfbacbfpjahp":{"installation_mode":"force_installed","runtime_blocked_hosts":["*://login.microsoft.com/*"]}}

Hello. When Devolutions Server has an open session in the same browser (not in private), the browser extension should use that session to login itself. I know it's possible, because Delinea does that with their Secret Server. Also, if RDM needs to log in, and a session is open with DVLS Server in the same browser, it should use that session. Thank you. Best regards. Marcel

It would be great if website passwords could be changed easily, as it's currently very confusing and not straightforward. Thank you.

Is it possible to make password creation adhere to the default password policy defined on the Devolutions server? This works OK on the browser plugin, but in the app it seems to be up to the end user.

We use ZTNA to authenticate connections to our Devolutions server over the WAN. This works fine with both RDM and the web GUI, however, the Workspace App seems to require a VPN connection - there is no way to choose or set the ZTNA certificate to allow the connection. Is this something that is on the roadmap?

Hey, we are currently in the process of migrating from Netwrix to Devolutions and are overall very satisfied with the platform. However, there is one feature we are currently missing that would significantly improve usability in our daily workflows. In Netwrix, it is possible to use keyboard shortcuts to quickly copy the username, password, or both at once. This allows for a much faster and more efficient handling of credentials, especially when working with multiple systems. At the moment, Devolutions does not seem to offer a comparable shortcut-based functionality for copying credentials. Feature request: We would like to request the addition of configurable keyboard shortcuts for: Copying the username Copying the password Optionally copying both username and password together This feature would greatly enhance productivity and streamline workflows, particularly for administrators who frequently need to access and use credentials. Thank you for considering this request. Please let us know if further details or use cases would be helpful. [image]

Using both Workspace for Windows and Workspace Edge extension. The Edge extension is way easier, though not used much because of the lack of information. Having many OTP for the same system, though different usernames, does the naming difficult and long. I'd rather not name all with username. This way an account will be named "System | Company | Long username". It would be very helpful, if the Edge extension has the account information as well. [image] [image]

Hi, We're using RDM in our company with a Devolutions Server as the database and just discovered that there is a Workspace app. We have shortcuts for every website, and the logins to these websites are secured with an OTP tokens. However, it is currently not possible to copy the OTP token directly from a website shortcut. We'd like to be able to copy the OTP tokens directly from the shortcut. Additionaly, it would be appreciated if we could create a website shortcut and link an existing OTP token that is stored in a password list (instead of requiring a standalone OTP token entry). Best regards!

We as an IT company have many many users that use the clipboard history. Sadly devolutions workspace and if i am not mistaken also RDM dont actually delete te clipboard entries like for example keepass or keepass XC does. It simply just puts in a blank. Yes that does clear clipboard if you dont use the clipboard history but it should just be able tot delete the history. Me as an IT technician but even more our security department would really like to se proper clipboard entry deletion as feature in all devolutions server associated applications! If you have any questions let me know. [image]

When I want to review a password from a record's password history, I need a button that allows me to copy it, not just view it, or a button to restore it.

Hi, we're using RDM in our company and we just found out that using Workspace to fill out e.g. website logins with creds that are within the team's vault does not log the use of said credentials. Meaning a team member can freely use the creds via Workspace and not be logged, which is... not good from a company perspective. One aspect that made us use RDM in the first place is the extensive and great logging capabilites of e.g. the use or access of administrative creds. Opening the entry directly via RDM logs the usage properly, but you can bypass said logging by just opening the website directly within your browser and using Workspace to fill out the login. Funnily enough, using the globe icon within RDM to open the website externally also doesn't log. This seems counterproductive, no? Using Workspace to fill out logins within your browser should also be properly logged, as if you'd open the entry within RDM directly. Kind regards, Kev

Hi, same thing that has been requested for remote desktop manager in this thread: Use Remote Desktop Manager with Azure AD App Proxy Pre Auth and Devolution Password Server (devolutions.net) This works if azure application proxy is in pass thru mode, but not if pre authenticated is enabled.

I don't see that there is any built-in feature to be able to import passwords from Edge\Chrome other than exporting them manually and then importing them into the Business Workspace via the web portal. As we have a large company circa 200 users this isn't something that you'd expect your users to be able to do and means that our IT staff will have to do this manually for all users which is going to take a considerable amount of time which could be better used on other pressing projects. Please can this be added so that when you are setting up the add-in in Edge\Chrome you can import passwords from the password vaults in Edge\Chrome.

Hello there, I've recently started using Devolutions Workspace and noticed that the filter only works for the name of the entry and not properties like the username. I am used to working with password vault software that allows to search by username which is really helpful as sometimes I just want to quickly get my admin credentials by name and not by what I titled the entry as I usually do not keep that in mind and it is very habitual right now.

It very annonying that we have to manually sync entries on mobile devices. It's the same feature that has been implemented here: https://forum.devolutions.net/topics/44239/background-sync But it is missing on Android and iOS.

From the Workspace Desktop App, you cannot search entries by text in fields such as the username. This is very limiting when compared to other tools (from Devolutions and competitors). I can see that from RDM and the workspace browser addon I can search for text in the username field, so I guess this has been left out by omission. Would be nice to see it in place in the near future.