miles

Hi David,

I notice the web add-on for Chrome has been updated, however it offers none of the features I mentioned above.

As I can't stop users from accidentally saving their password into the default vault (instead of their private vault), I can't deploy the add-on in our organisation.

Additionally, the search function is still only working when you're on a URL that is saved in RDM / Devolution - Trial users don't understand why they can't search for any entry inside RDM / Devolutions and automatically open the connection, like other credential managers.

Regards.

Awesome Hubert, what version should I be looking for?

I can get one of our admins to thoroughly test it on our 6.6.18120.6697 environment.

Additionally, is it possible to control some of the settings via GPO.

For example, locking the Devolutions Server interface to only allow saving credentials to the Private Vault - preventing accidental saves of user credentials into the Shared Vault.

Also setting DVLS server string and other options.

Regards

Hi Team,

I find the current Web Login Extension (Chrome) very limited in its current form for our organisation, as the search function only finds sites / credentials when Chrome is already at one of the saved URLs - you can't search for any site or credential if you can't remember the URL.

I propose the following changes / enhancements:

• Config - Allow searches to query all (or some) RDM / Devolutions Server entries

• Query - Allow searches to include URL strings... i.e. "micro" will return microsoft.com and microcars.com

• Results - Dedup / Return only one entry if they are the same (1 via RDP and 1 via Devolutions Server - don't need to display both)

• Function - Add password generator - can sync back to any saved entries in RDM / Devolutions Server

• Layout - In drop down menu, add expanding tab to display all available sites / credentials - like saved bookmark function. Similar to Lastpass's "Sites" menu.

The Web Login Extension could easily become the main interface to Devolutions Server (and RDM) for the majority of corporate users, and more users would start using it if it had some friendly / easy to use enhancements - office users want simple, they don't want to change between Devolutions / Web Login to manage sites and credentials.

Regards,

Miles

Hi Hubert,

Do you have any update on the OTP please.

Regards.

Hi David,

Any update on 30-Day OTP accept for ScreenConnect sessions?

Regards.

Got some funky crazy stuff happening at the moment, have sent email with screenshots. Page opens, Web Logon shows the credential as "Domain\User", but won't fill in the username or password fields - I'm getting intermittent results.

If the search only works when on a specific page, how many credentials do you anticipate your customers would have per page? Would they use the search function, or just go straight to the drop down menu and chose it (quicker to click)?

In its current form, we wouldn't use the search function, as the credential is displayed when opening each website. We would use the search function a lot, if it was able to query all the web browser sessions which were marked as browser enabled (quicker resource search / access capability).

Hi Olivier,

Yes can see now that "auto fill login" and "auto submit" are only available when "Display == Embedded", so if I want to auto fill / submit in Chrome, I need to use Web Logon and "Display == External". I've sent email to support, as there are still a lot of issues with this.

However, when I set "Display == Embedded", then the URL opens internally, but no credentials are added into the web pages - auto fill / submit does not seem to work for embedded.

Also I want my team to be able to click "Open (External)" or "Open (Embedded/Tab" to access the web page internally or in a web browser, however they feel like doing their Admin... Does it matter if Display == Embedded / External, or should their credentials get passed depending on with way they chose to open the web page?

Regards.

Hi David,

Is there a way to disable adding my username / password into all objects synchronised? It leaks my credentials to the rest of the team - this is not easier.

Thanks for update, happy to help test 30-day OTP when available.

Regards.

Hi Oliver,

Yes I started the other thread before I noticed this one, and I've sent James an updated email as per his request.

The Web Addon doesn't autofill our page, if we change web browser tabs and change back to the target web page, then our credentials will populate.

However we can't get the username to fill as "Domain\Username" for Windows based authentication.

I'm curious why even have a search function if you're only going to find credentials on a site you're already on? The addon tells you if it has credentials for the URL you're at, so you just choose the correct one.

IMO the search function would be better served searching for web browser sessions which have been enabled via RDM or Devolutions - search, click and authenticate in one step. Search once you get the URL seems a bit pointless.

As per attached screenshot, the "Auto fill login" and "Auto submit" are greyed out, whether we choose "Form" or "Basic" authentication modes.

Can't seem to change these options.

Hi James, I've sent an email through with the details.

Thanks.

Hi David,

Yes, disabling auto sync allowed Use One Time Password option - that makes logical sense.

I was able to Sync a large amount of servers manually with OTP into a test folder, however I noticed it injected my username and password into every ScreenConnect client - the Sync and other sessions use Inherited credentials in the shared datasource.

How can I prevent saving my username / password in new entries? do I need to create a new ScreenConnect template and link it in the Synchroniser?

Have the Devs had success with "Trust This Device" the 30 day OTP session?

https://docs.connectwise.com/ConnectWise_Control_Documentation/Get_started/Administration_page/Security_page/Enable_two-factor_authentication_for_host_accounts

Kind regards,

Miles

I'm also having similar issues with web logon... Our Devolutions server has several web enabled browser sessions, however when I search for any of the entries in the web logon search dialogue, none of the sites / objects stored in Devolutions / RDM are found in search. Search only works if I currently have one of the saved URLs in my Devolutions / RDM, in the Chrome browser window - but now there's no need to search for it.

Additionally, if I'm on a stored URL, the web login doesn't always add a "1" etc.. to say there is a credential. Change tabs and come back, the addon updates the notification. Change tabs and come back, and I'll get a different option again.

Domain doesn't get passed to web browser for corporate authentication such as "DOMAIN/Username", even though I change the username settings to {Domain}\{User} in Advanced Properties.

I notice LastPass addon finds a lot more field IDs automatically, and web addon needs more manual investigation to set up web browser entries - I can't get vSphere authentication to work with Devolutions / RDM / Web login.... it works perfectively with LastPass.

Have latest Crhome addin.

Our main Devolutions servers are 4.7.1.0 running on RDM 13.0.6.0. Do I need to upgrade these to 13.0.15.0 before the options are available?

Hi David,

I've just installed 13.0.15.0 and noticed the ConnectWise Control Synchroniser now has the option for Use One Time Password - Awesome. However, when I set up the synchroniser, the OTP option is greyed out, I cannot seem to enable it, and ScreenConnect authentication still fails.

Our admins save their credentials in their private vaults and link them to Devolutions / RDM entries using the "User Specific Settings", and all our shared objects in the main navigation window use inherited credentials for authentication. In this configuration, I would expect the ScreenConnect synchroniser to authenticate with the credentials of the admin user who initiates the sync, and they would need to add their own OTP for the 2FA process.

However as I can't enable the OTP, the MFA doesn't prompt.

Please let me know if I'm using it incorrectly, or you need additional information about our setup / configuration.

Regards.

Hi Team,

I'm setting up all our corporate IT web portals in Devolutions / RDM so our administrators have instant access if they have permissions to log in.

Everyone stores their Admin credentials in their private vault, and links them to our web portal folder in Devolutions using the "User Specific Settings", and all web browser sessions are set up to inherit permissions from the parent folder.

Web portals that simply ask for "username" and "password" work fine, however where the username format needs to be "domain\username" is not working, the Devolutions Web Logon chrome extension is only filling in "username" and "password", the "domain" component is missing.

I've gone to the Properties page (Advanced) and changed "Username format == {Domain}\{User}", but it still only populates as "username".

The credentials are working with RDP sessions, currently using 12.0.15.0 Beta, and trying to authenticate admins with vCenter.

On a side note, I've also noticed the "Auto fill logon" and "Auto submit" options are greyed out and cannot be adjusted.

Also, I cannot search anything in the the web logon Chrome addin, it only tells me a credential is available if I manually browse to the URL in one of the web enabled entries in RDM / Devolutions, should I be able to search, click, and autologin to web portals I've enabled? running latest version of addin.

TIA

Hi David,

Were you able to get any feedback from engineering?

Kind regards,

Thanks David,

Also, the ScreenConnect Synchroniser does not have an MFA / "Use One Time Password", so it can't sync MFA protected web portal / clients at all.

https://help.remotedesktopmanager.com/sessions_sshshell.htm

We ban telnet as its insecure.

Enable SSH on all your Cisco devices instead, and use SSH to authenticate - SSH also has the "After Login Commands" option to push "enable" to console.

We have 400+ Cisco switches configured with SSH / RDM autologon - personal credentials are inherited from top network folder.

We currently run our ScreenConnect Server & Client 6.3.13446.6374 environment on-premise, with Google Multi Factor Authentication. When we log into the ScreenConnect web portal, we are presented with the MFA validation, which includes an option "Trust this device", allowing the user's browser not to re-authenticate with MFA for 30 days, as per ConnectWise documentation:

https://docs.connectwise.com/ConnectWise_Control_Documentation/Get_started/Administration_page/Security_page/Enable_two-factor_authentication_for_host_accounts

However when we set up our ScreenConnect remote sessions with Remote Desktop Manager Enterprise 13.0.12.0 (BETA), we need to select "Use One Time Password" for each ScreenConnect object, and also use MFA each time we open one of the ScreenConnect connections.

Can you please build in an option for RDM to use "Trust this device" for MFA, so the queries can be suppressed for 30 days from trusted devices (Admin's RDM Client).

i.e. In RDM we set all ScreenConnect settings to MFA / "Use One Time Password", and it asks for code. Then doesn't ask for code for 30 days until the ScreenConnect server re-prompts, which asks user for new code again.

Additionally, the ScreenConnect Synchroniser does not have an MFA / "Use One Time Password", so it can't sync MFA protected web portal / clients.