Skip to Main Content
HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.

For more information and upcoming events around #dominoforever, please visit our Destination Domino Page

ADD A NEW IDEA

Security

Showing 300

DIIOP to enforce password expiration at login

As of now password expiration at login only works for Notes and HTTP authentication. We request to enable to password expiration also works for DIIOP protocol as well when creating session using NotesFactory.createSession.
over 4 years ago in Domino / Security 0 Under Consideration

Whitelist Active Content Filter on iNotes

We can use the parameter iNotes_WA_DisableActCntSecurity=1 to disable the Active Content Filter on iNotes and this removes potentially harmful active content from HTML in mail messages prior to display in a browser. However, using the parameter ...
12 months ago in Domino / Security 1 Needs Review

Possibility to log in via certificate AND password

Currently you can set Domino to authenticate users via password OR certificate. It would increase security when login using certificate is selected and additionaly user is asked for his notes/internet password (as second factor). Then the security...
12 months ago in Domino / Security 2 Needs Clarification

Restrict the number of messages a single user can send in 24 hours to a maximum number of messages

Sometimes users are victims of clever phishing emails sent to them. Unfortunately this opens up the use of their valuable credentials to potential hackers. These hackers can then send email using their credentials. If Domino would have an internal...
almost 3 years ago in Domino / Security 3 Under Consideration

Synchronizing of the User ID in mail files ($shimmerid) with the Internet password/ID vault

Synchronizing of the User ID in mail files ($shimmerid) with the Internet password/ID vaultID file can't be uploaded to mail file when SAML is enabled
about 6 years ago in Domino / Security 0 Assessment

Fallback to password authentication when SAML has been activated as

Fallback to password authentication when SAML has been activated as needed. Server should accept SAML and password authentication, depending on the policy
about 6 years ago in Domino / Security 1 Under Consideration

Internet password lockout whitelist

The internet passowrd lockout feature needs to be improved, like more logging, idea: DOMINO-I-389. It would be an improvment if there would be an option to add a whitelist for IP ranges. So if a user is locked out he could still login within an tr...
about 6 years ago in Domino / Security 3 Under Consideration

Log Copy on Database

Information in Domino Log database when someone have created local copy of database.
about 5 years ago in Domino / Security 4 No Plans to Implement

users locked out due to wrong password or wrong password strikes have their own Statistics in Domino, so later they can be monitored.

Another idea on Domino.ideas.aha.io is to log per protocol strikes and locks. If we can create new statistics this would help to monitor security with DDM or external solution Security Security.POP3.Strikes.Total = 30 Security.POP3.Locks.Total = 2...
about 6 years ago in Domino / Security 0 No Plans to Implement

Url scanning blocks ipadress

Add functionlity as with ip adress trying to login with multiple usernames. If an ipadress is trying different non existing url:s that ip will be blocked for x amount of time. Also that url:s can be ”blacklisted” so if an user is trying to access ...
about 2 years ago in Domino / Security 0 Under Consideration