Skip to Main Content
HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.

For more information and upcoming events around #dominoforever, please visit our Destination Domino Page

ADD A NEW IDEA

FILTER BY CATEGORY

Security

Showing 256

SAML2 self service integration

In a saml2 world getting rid of ldaps and also auto deploy to groups would be an dream. The idea is that you enable auto creation of users with a certain email domain or attribute with a secretkey from adfs. You also specify some group access ...
over 3 years ago in Domino / Security 2 Needs Clarification

headlines.nsf database to be enabled for roaming in users roaming profile

In a roaming environment, a subscriptions(headline.nsf) can be viewed only on the PC where subscriptions are created in headline.nsf.Customer requirement is to consider headline.nsf database to be added in roaming user databases (names.nsf, bookma...
over 3 years ago in Domino / Security 0 Under Consideration

Control over the setting "don't let administrator set Domino web/internet password to match Notes password" via Domino policy.

Administrator should have control over the setting "don't let administrator set Domino web/internet password to match Notes password" via Domino policy.
over 1 year ago in Domino / Security 1 No Plans to Implement

Disabling local processes or external processes using the Domino Server

A way to disable executing local processes and commands on Domino using powershell, cmd, etc
over 1 year ago in Domino / Security 0 Assessment

Router does not obey the Reader field if the Reader Access and above is restricted for Person Document

1) A person document is restricted via Person Document Properties>>Access>>Unchecking "All Reader and above" field. Anonymous is not selected. 2) An email is sent from Notes client/iNotes to the restricted user's internet address by us...
over 2 years ago in Domino / Security 3 Assessment

Accept external emails for a restricted group document when the external user is added on the security tab of the group document properties.

Sending a message to a group will be rejected with the reason "Not authorized to send mail to this user or group", this happens if the setting in security tab of the group document properties is a specific internet address from the external non-do...
almost 4 years ago in Domino / Security 1 No Plans to Implement

SAML implementation, can be done safer?

1.) HCL Domino server 12.0.1 (and older) are missing SAML Artifact binding implementation/settings. It has just SAML POST binding :-( Hmm it also works SOAP and inside SAML POST binding, but SAML ARTIFACT binding didn't work for me at all. Is SAML...
over 1 year ago in Domino / Security 0 Needs Review

Prompt for user content before configuring notes client.

This is to control & monitor user and admin activity in terms of account access. ( just want user consent before configuring notes client on behalf of the user.). Basically, customer have MFA for notes, but none for lotus notes client security...
over 1 year ago in Domino / Security 1 No Plans to Implement

PKI certificate in the person document - Domino to not check the whole certificate and just the SubjectDN

If that name matches an entry in the Domino Directory, you use the first entry from the full name field for further authorization. Otherwise, you use the common name from the certificate. More data points for not keeping the entire PKI certif...
over 4 years ago in Domino / Security 1 Under Consideration

Option to select whether the LTPAToken should be completely removed/or usable when session has been completely ended.

When enabling Session authentication across servers, the token issued by a server can still be used even after the session has been completely ended on the server and on the browser. If a user issues a request to the server using the same token, y...
over 1 year ago in Domino / Security 1 Under Consideration