Prompted for Credentials when using Password List for website

Hello,

What version of RDM are you using right now?

Just to be sure, is it a Login Web entry or a Web Browser session?


Best regards,

We are using 14.0.7.0 and we are using a Login (Web) entry.

Hello,

I tested with our cloud login portal https://cloud.devolutions.net and did not find any issues with a login web entry and more than one account in a password list.


Can we test the website you're having issues with or is it an Internal URL?

Do you experience the same issue on other websites?



Best regards,

Hello,

Unfortunately, I have tested this scenario in my environment and I am currently unable to reproduce this issue.
Could you please import the tests entries that I have attached to this post and see if the issue still occurs with them?

Best regards,

Hi James,
So from your entry, and rereading my post, I failed to mention that the password list is in the private vault and then using user-specific settings to apply the password list generates the prompt.

Assign the password list within the entry works fine, but not when using it as a user-specific setting.

I have also tested local-specific setting and achieve the same results and receive a prompt using the entries you provided.

I have attached zip with the screenshots of what I'm getting when using the above method

Hello,

While trying to reproduce this issue I stumbled on something that seem to be similar to what you are reporting.
Could you please consult the video in the attachment and confirm that this is the behavior you are currently experiencing?

Best regards,

Hi James,

That is the exact issue that is occurring, thanks for confirming.

Hello,
Great! Thank you for your swift reply.
Does this issue persist if you click on your Devolutions Web Login extension and uncheck "Automatically retrieve credentials on page load" under "Setting" -> "General" ?
Best regards,

Hi James,

Apologises for the delay as I have been on leave.

It stops the issue from occurring on the page load, but as soon as we go to load any password via the extension, it reoccurs.

Hello,

No problem I understand.

Would it be possible for you to provide us a video of the current configuration of your DWL extension and to show us a recording of this behavior with the "Automatically retrieve credentials on page load" unchecked.

This recording can be sent to us using the following sharefile link:
https://devolutions.sharefile.com/share/getinfo/raba75bde4424504b

Best regards,

Hi James,

I have now uploaded the video.

I have also included the normal way as well for reference as there is no difference really between the two settings except for I get the prompt straight away with the automatic load.

Hello,

Thank you for this video, I will provide it to our engineering department in order to see what can be done on that matter.
I will contact you as soon as I have any update on that matter.

Best regards,

Hello,

I'm just following up regarding this issue.

I'm now currently running 14.1.3 RDM Enterprise with 7.1.0.0 web extension and still having the same issue.

I have also attempted to create new web entries, both website and web login, and new password lists and I'm still experiencing the same issue.

Hello,

Sorry for the delay. Analyzing your video to find the cause of this issue took longer than expected but the information you provided us has allowed us to confirm the cause of this behavior.

This is due by the fact that you have more than one entry that point toward the same Password List entry. When the Devolutions Web Login extension attempt to search within your RDM application for the correct credentials for your website it does so by using the "Url". So for example, if you have 3 result on a specific website and that these credentials are stored in a Password List entry, the Password List entry will be opened 3 times (as shown in your video).

Best regards,

Hi James,

The reason why we get prompted 3 times, is because they are using 3 different password lists, ie 1 for each customer.

For example, 1 website (such as Office 365) will have different customer credentials, so we will create 1 Web login for each of the customer, it will look like this.

Customer 1 - O365 Login (Web) entry to Customer 1 password list using the specific O365 credential located within the password list.
Customer 2 - O365 Login (Web) entry to Customer 2 password list using the specific O365 credential located within the password list.

If the password list only contains 1 entry, the prompt doesn't occur, but as soon as you add the 2nd entry into the same password list (without assigning the 2nd entry to anything), we start getting prompted. This makes no sense as it is still a password list and the entry is still specified the exact same way and nothing else has changed, except that the password list now has 2 credentials in it.

The main reason we want to utilise the password list over username/password entries is that it makes it easier when passwords get reset or expire, to update the 1 list rather than having to go to each individual username/password entry, while also keeping the private vault tidy and organised which is what I assume is the purpose of the password list entry.

As I mentioned earlier, it appears that when you specifically assign a credential in a password list via the properties menu on an entry, it will work as intended, but if you are trying to use the User\Local Specific options to set your credentials over it, it is failing. But you can only specifically assign an entry in a password list if that password list is in the main repository, not in your private vault. This occurs regardless if the Web Browser or Login (Web) entry is located in the credential repository or in your private vault.

This issue seems to be more related to how your application decides to use password lists depending on how they are being applied and located within your application and how many credentials are in the list, rather than treating them same across the board.

I shouldn't have to put my private password list in the main repository and add it directly to an entry (so anyone who uses that entry will get my credentials) to get the same functionality if I were to assign my password list from my private vault using the User/Local specific settings.

Hi,


I have been able to reproduce your issue with the User\Local Specific settings and password list in the private vault.


To be sure we are talking about the same issue, here my steps to reproduce it


1. Create a password list credentials in my private vault
2. Create two credentials in my password list credentials
3. Create a web login data entry session in the vault
4. Add a Local Specific settings (By right clicking on my enter -> Edit -> Local Specific settings )
5. Check "Override credentials"
6. Select Private Vault in the dropdown
7. Select the Password list credentials I just created
8. Click on "Select from List" to select a specific credentials
9. Click on View Password


When I click on View password, I get a prompt to select the credentials in my password list even though I set a specific credentials in Local Specific Settings.
It also occurs with the extension.


We opened a ticket for this issue.


Best regards,

Hi Olivier,
That is correct and the exact issue that is occurring.

Thank you for opening a ticket regarding this issue.

Hello,

The prompt issue when using a password list from the private vault in the specific settings should be fixed in the version 14.1.4.0 of RDM.

Please do let us know if the issue persists.

Regards,