Announcement

FIXES Minor update

IMPROVEMENTS Licenses - Added a warning when refreshing a license that reduces the allowed number of users PAM - Added notifications when a PAM service becomes unavailable, via in-app message and email PAM - Updated the "Enable PAM" empty-state screen with a new illustration Performance - Improved the performance of the vault entry count for large environments Security - Added support for allowing multiple IPv4 addresses on an Application Identity Security - Added validation requiring an HTTPS URL when configuring the Encryption Service SSO - Added support for configuring multiple Hub SSO providers Vaults - Added a "Try using other keys" button in the Vault Health report to recover corrupted entries FIXES Entries - Fixed RDP port changes not being saved Entries - Fixed the "No Tag" filter incorrectly including entries with inherited tags Export - Fixed broken PowerShell help links in the export Gateway - Fixed "Open in Web" remaining available when "If Not Connected" is not selected Gateway - Fixed the ability to open or edit sessions on a deactivated gateway Gateway - Fixed unassigned gateways appearing in vaults and being selected by default, causing save errors PAM - Fixed a check-in lock that could not be removed after a failed check-in PAM - Fixed an error during privilege elevation with a Just-In-Time account PAM - Fixed irregular success and failure logging in the scheduled heartbeat check PAM - Fixed the checkout policy MFA option displaying "Default (Default)" PAM - Fixed the PAM service dropping its connection to the server without reconnecting PAM - Fixed the PAM service staying active after being stopped when using a subdomain-less URL PAM - Fixed the PAM service taking up to 30 minutes to stop from the web client Recordings - Fixed an occasional error when retrieving recordings Recordings - Fixed deleted recordings reappearing after a refresh Recordings - Fixed gateway recording not working when the recording setting is inherited from a parent folder SSO - Fixed access to the Provisioning tab once an SSO provider is configured SSO - Fixed organization synchronization failing for large organizations Various bug fixes and improvements

IMPROVEMENTS Vault Health - Improve the fixing action when sensitive and password keys are invalid

FIXES Various bug fixes and improvements

FIXES Various bug fixes and improvements

IMPROVEMENTS Dashboard - Added a button to reset the dashboard layout to its default arrangement Entries - Added a button to remove a custom image from an entry Entries - Added a new entry type for domain name registrar information Entries - Added an expand and collapse all option for folders Entries - Added the possibility to convert legacy Website entries to the new Website entry type Entries - Improved the contrast of fetched brand symbols Entries - Removed the Privileged Account option from the User Specific Settings of Credential entries PAM - Disabled heartbeat and password reset on PAM accounts set to Unmanaged PAM - Excluded a user's linked accounts from the approver list when self-approval is not allowed PAM - Improved the gateway test connection to also verify connectivity from the PAM service Security - Added the ability to require multi-factor authentication before opening sensitive entries Sessions - Added the ability to prompt on connection for linked VPN, SSH, and gateway session modes Sessions - Disabled the Open in Web action when If Not Connected is not selected in gateway settings Temporary Access - Added the ability to request temporary access for a group or multiple users at once Temporary Access - Allowed a Temporary Access Authorizer to select themselves as the target when granting access Vaults - Made the vault description field support multiple lines FIXES Administration - Fixed being unable to add a password policy due to a disabled Add button Administration - Fixed bulk action buttons not appearing on the Devolutions Gateway bulk update page Administration - Fixed Provisioning Logs failing to load Administration - Fixed the Azure Log Analytics sync frequency resetting to 60 minutes Administration - Fixed the Send invite button being disabled on the License step of the invite users wizard Entries - Fixed custom fields not showing on bank account entries Entries - Fixed linked (shared) entries not working in the user vault Entries - Fixed needing to edit an entry's message in order to change its status Entries - Fixed password policy settings not being saved in the password management section Entries - Fixed passwords being hidden from authorized users when an entry status is Pending Approval Entries - Fixed the Override private key option re-enabling itself after being unchecked Entries - Fixed the Reveal License button not appearing on License entries PAM - Fixed checkout information being shared incorrectly across different entries PAM - Fixed credentials being viewable without a checkout prompt when automatic checkout mode and checkout prompt were enabled PAM - Fixed raw HTML tags appearing in the Force Check-in confirmation dialog PAM - Fixed scheduled heartbeat checks intermittently logging failures PAM - Fixed the default JIT group dropdown not appearing when creating a session PAM - Fixed the heartbeat check not running after resetting a Windows local account password and a duplicated username in the account overview PAM - Fixed the Update button not enabling when selecting default JIT groups on a session Security - Fixed broken access control during offline mode synchronization Sessions - Fixed an error that sometimes occurred when retrieving recordings Sessions - Fixed gateway sessions remaining marked as active after a connection ends Sessions - Fixed sessions staying marked as open when the browser tab was closed instead of the session Temporary Access - Fixed the interface not updating after accepting or denying a temporary access request

FIXES Various bug fixes and improvements

FIXES Various bug fixes and improvements

IMPROVEMENTS [Entry] - Added a new entry type for storing Public Domain Name Registrar information [PAM] - Added a pending checkout icon in the tree view to make pending accounts easier to identify [PAM] - Added optional multi-factor authentication (MFA) on checkout [PAM] - Changed the Enable Password Field control on PAM accounts from plain text to a proper button [PAM] - Restored the loading indicator that displays while a heartbeat is running [PowerShell] - Updated the Hub client package in the PowerShell module so users can now disable and configure Force SSO through scripting [Session] - Added the ability to prompt for a VPN/SSH/Gateway connection at session launch FIXES [Dashboard] - Fixed long custom widget names overflowing their container in the web client [Dashboard] - Fixed missing outline around movable widgets when editing the dashboard in light theme so frames now appear consistently across all themes [Entry] - Fixed an Invalid data error when editing an existing attachment on an entry [Entry] - Fixed an issue preventing website entries from being updated when their name contained characters that are actually valid [Entry] - Fixed inconsistent logo sizing in the Brandfetch image selection so logos display at a uniform size [PAM] - Fixed a regression causing password reset and heartbeat checks to time out when the server and PAM Service used mismatched subdomain configurations [PAM] - Fixed a regression where automatic check-in was no longer performed by the PAM Service at the end of a checkout [PAM] - Fixed an invalid data error when saving a custom heartbeat or password rotation schedule with a frequency exceeding 60 minutes or 24 hours [PAM] - Fixed the global Password policy mode setting not being saved [PAM] - Fixed the JIT default group field showing a perpetual loading state in production where the feature is not supported [Password Management] - Fixed the Update button remaining greyed out when modifying a password policy [Reports] - Fixed the Provisioning Logs page failing to load with an Invalid data error and returning no results [Security] - Fixed an issue in the IP Allowlist where a single IP could not be added alongside the user's own IP [UI] - Fixed color and visual inconsistencies [User Management] - Fixed an infinite loading spinner that prevented non-admin users with delegated permissions from managing users and invitations [User Management] - Fixed non-admin users intermittently receiving an Access Denied prompt when accessing the Administration tab [User Management] - Fixed the Delete and Reinvite buttons not appearing for certain users [User Management] - Fixed the disabled Send invite button on the License step of the Invite Users wizard so invitations can be completed [Vault] - Fixed an issue where the Default Vault setting would not stick when toggled [Web Sessions] - Fixed several session close lifecycle issues for RDP, VNC, and ARD desktop web sessions [Web Sessions] - Fixed VNC and ARD web sessions becoming stuck on a frozen frame when a gateway or server connection was abruptly terminated

FIXES PAM - Fixed PAM service no longer automatically checkin Users - Fixed delete and reinvite user buttons may not be visible in certain circumstances Users - Fixed error when non-administrator users with delegation permissions try to manage invitations and users

IMPROVEMENTS Various bug fixes and improvements

IMPROVEMENTS Various bug fixes and improvements FIXES Entries - Can't update Website entry in certain circumstances Licenses - Correct label message when adding a license PAM - Fixed Password reset and Heartbeat check issue

IMPROVEMENTS Various bug fixes and improvements

NEW FEATURES Rebranding - New Look, to reflect "Devolution Cloud" name change Rebranding - Rebranding, from Hub to Devolutions Cloud IMPROVEMENTS Administration - Added an "Enforce clear clipboard after copy" setting in System Settings for Workspace clients, with a configurable timeout period Administration - Improved the Administration and Reports navigation and a cleaner overall UI layout Administration - Moved high-risk destructive actions (including "Delete Hub") to a dedicated "Danger Zone" tab under System Settings to reduce the risk of accidental execution Authentication - Added social login support for Hub accounts Authentication - Added support for configuring multiple Single Sign-On (SSO) providers for a single Hub Dashboard - Updated the dashboard UI to use consistent and clear terminology for custom widgets and default dashboards Entries - Added the "Allow password in variable" security option for Username and Password credential Entries - Improved the entry view so that the simplified view toggle remembers the user's last-used setting between sessions Entries - Removed the inapplicable "Use Linked Host Credential" credential type option from host-type entries Hub - Added support for reserved names in Hub Personal, allowing hubs to be accessed via a named URL path Hub - Added the ability to reserve a unique hub name and subdomain across regions Import/Export - Added the ability to export entries to an encrypted JSON file with a master password, including a deobfuscate option Logs - Added the platform and product version as a field in Hub log entries, improving diagnostic capability Logs - Added the platform and product version to the audit information displayed in the entry overview, making it easier to trace version-specific issues PAM - Added an option on SSH PAM providers to use the provider account credentials for heartbeat connections, supporting environments where privileged accounts have SSH access disabled PAM - Added checkout duration and requested JIT groups to the PAM checkout request email sent to approvers PAM - Added multi-factor authentication (MFA) verification when launching sensitive entries PAM - Added PAM support for the contractor user type PAM - Added support for Devolutions Gateway rule sets on PAM providers PAM - Added the ability for PAM operators to select group assignments from discovered accounts in scan results and automatically populate the JIT Elevation configuration PAM - Added the JIT Authorization tab to Active Directory and Azure PAM entries to display the configured JIT groups for each entry PAM - Improved the PAM checkout request message for approvers to display full checkout details with inline Approve and Deny actions PAM - Improved the performance of EntraID account discovery when searching large groups PAM - Restored a missing toggle switch in the PAM JIT account configuration Password - Updated the Password Analyzer to remove the password strength bar and show only the occurrence count Reports - Added a Contractor Users report page in the Reports section Sessions - Added session recording support for PowerShell sessions UI - Applied various minor UI improvements and polish across the application UI - Restricted the file types allowed for insertion in documentation attachments to supported formats (PDF, GIF, images) Users - Added an Authentication Type column to contractor reports Users - Added automated email notifications sent to administrators when user or contractor accounts expire Users - Added sorting and filtering by the "Last Used Device" field in the Users administration table, and improved the CSV export to include this field Users - Improved the contractor user type with a user type column in the user list Users - Improved the user table layout and responsiveness for small screen sizes Various bug fixes and improvements Vaults - Added an administrator-controlled setting to disable the export functionality for user vaults Vaults - Added the ability to select and delete multiple vaults simultaneously, with a confirmation prompt before the action is executed FIXES Administration - Fixed a delay where binding an IP address to an Application Identity Administration - Fixed issue where specific permissions assigned to admin users were not displayed in the permissions UI Administration - Fixed the administration section tabs to be visible and accessible on small screens and mobile viewports Authentication - Fixed an issue where removing the Force SSO setting via SRM could break hub access Dashboard - Fixed an issue where creating a system dashboard widget with the correct permissions incorrectly returned an Access Denied error Dashboard - Fixed multiple dashboard widget inconsistencies between RDM and Hub Web Dashboard - Fixed multiple dashboard widget issues including synchronization between RDM and Web Entries - Added support for configuring entries with single, multiple (fixed count), or unlimited simultaneous checkouts Entries - Fixed an issue where the Logs tab showed no entries for users with the Contributor role when viewing a Username and Password credential entry Entries - Fixed credentials to display correctly in the entry overview Entries - Fixed OTP entries to support the colon (":") character in application and account name fields Entries - Fixed the Security Settings tab to be visible for Contributor-role users in the credential entry edit dialog Import/Export - Fixed a regression where the scrollbar and action button were missing on the final step of the import wizard, preventing completion Import/Export - Fixed the "Create Folder" dialog in the Import window to consistently render icons and accept spaces in folder name input Import/Export - Fixed the `-DeobfuscateSensitives` parameter in the PowerShell CSV export to correctly return passwords in clear text Licenses - Fixed an incorrect assigned license count Licenses - Fixed expired licenses in the Users Dashboard to be clearly visually distinguished from active licenses using a badge or color indicator Licenses - Fixed the license assignment list to display both accounts when users are linked PAM - Fixed an "Access Denied" error that occurred for users who received checkout or access request notifications for vaults they do not have access to PAM - Fixed issue where PAM propagation PowerShell scripts were no longer visible in the configuration view PAM - Fixed PAM accounts imported from RDM with "Inherited" account lifecycle policy to correctly display as "Inherited" instead of "Custom" PAM - Fixed the Approve and Deny buttons to be correctly grayed out for the requesting user when the "Yes, Unless JIT" option is selected for own checkout approval PAM - Fixed the Entry dropdown in the Checkout Requests report to display only PAM account names PAM - Fixed the items-per-page display filter in the PAM account import window PAM - Fixed the JIT provisioner username length limit to match Active Directory's 64-character limit instead of the previous 20-character cap Password - Fixed sorting by occurrence count (descending) Password - Fixed the "At Least" field for custom characters in the password generator to act as a minimum threshold, allowing the generator to include more than the specified minimum Reports - Fixed the User Reports CSV export to include user tags Sessions - Fixed a false "Unable to find the VPN session" error that appeared when selecting a Devolutions Gateway in VPN settings before saving an RDP entry Sessions - Fixed an infinite loading state that occurred when entering incorrect credentials when opening a session in the web client Sessions - Fixed an issue where deleting an SSH certificate would reappear after saving; deletions now persist correctly Sessions - Fixed an issue where opening a session with no password in Hub web incorrectly prompted for a password before connecting Sessions - Fixed an issue where SSH sessions failed to launch when credentials were set to "Inherited." Sessions - Fixed clipboard redirection restrictions in web-based RDP sessions to properly enforce the disabled clipboard setting Sessions - Fixed error that prevented launching a session when the Devolutions Gateway was set to "Inherited" from a parent folder Sessions - Fixed session recording to work consistently in the user vault across both Hub Web and Remote Desktop Manager Sessions - Fixed the VNC session view to remove the obsolete empty sidebar Sessions - Fixed various UI issues in the Open in Web feature UI - Fixed severoal translation issues Users - Fixed a SCIM group assignment issue Users - Fixed a UI bug where an invited user's email appeared twice in the list after sending an invitation Users - Fixed connection status icons in the Users administration list to display at a consistent and correct size Users - Fixed the Save button remaining grayed out when changing the offline mode field in the user administration edit dialog

IMPROVEMENTS Various bug fixes and improvements

IMPROVEMENTS Various bug fixes and improvements for PAM

FIXES PAM - Various bug fixes and improvements for PAM

FIXES Various bug fixes and improvements

Tell us what you think! For external users who only need limited, time-bound access, the Contractor user type offers a simpler way to get them connected without treating them like regular internal users. In Devolutions Hub Business , contractors can be invited by email, start with a temporary password, and use a lighter web interface, the compact mode , to open sessions quickly and securely. How are you handling contractor or vendor access today? Would this fit your needs, or is something missing? Try it out and share your thoughts in the comments! [image]

IMPROVEMENTS Translation, various bug fixes and improvements

IMPROVEMENTS Various bug fixes and improvements

IMPROVEMENTS Various bug fixes and improvements

FIXES Various bug fixes and improvements

FIXES Various bug fixes and improvements

FIXES UI displays user twice on invite Various front end issues with the widget/dashboard