What’s New in Devolutions Hub Business 2023.3

Right on schedule per the Devolutions 2023 Roadmap of our CEO, David, we are delighted to announce that Devolutions Hub Business 2023.3 is now available. The latest version features some significant additions and enhancements, including some that were requested by our global user community. We are always listening to you!

In a moment, we will explore some of the most exciting updates in version 2023.3 (note: for a complete list of all changes please see the Release Notes).

First, let’s quickly recap Devolutions Hub Business for those who are new to the community.

About Devolutions Hub Business

Devolutions Hub Business is our highly-secure, cloud-based password manager built for teams. It empowers organizations to easily and securely vault and manage business-user passwords — along with other sensitive information such as building alarm codes, software license keys, corporate credit card numbers, etc. — through a user-friendly web interface that can be quickly, easily, and securely accessed via any browser. Plus, unlike many other enterprise-grade password management solutions, Devolutions Hub Business is very affordable for small and mid-sized businesses (SMBs).

Also, Devolutions Hub Business is a cloud data source in Remote Desktop Manager. As a result, users don’t have to launch both solutions. Everything can be easily and rapidly accessed from within Remote Desktop Manager, including remote connections, machine information, credentials, and other data.

Simply put, Devolutions Hub Business is the perfect balance of security, usability, and affordability. A free 30-day trial is available.

Now, let’s turn our attention to what’s new and exciting in version 2023.3!

New Restricted Vault Role Setting

Many of you have asked if it was possible to enable a user to see only some, rather than all, of a vault’s contents. Well, thanks to the new Restricted Vault Role in v2023.3, the answer is YES!

The new Restricted Vault Role is assigned at the vault level. Users or groups with this setting will see only the vault content that they have permission to view. Here are the simple workflow steps:

1. Edit the vault’s permissions.
2. Assign the desired user/group to the “Restricted” role.
3. In the folder’s properties or entries, give users/groups the desired access.

Once this is done, affected users will only see what they have permission to access. Here is is a sample screenshot with the Admin/Manager view on the left, and the user (with reduced access) view on the right:

Here is some more good news: this new functionality is also fully compatible with Remote Desktop Manager, Workspace (Desktop, Mobile), and the Browser Extension.

Update: Changes to Role Names

Due to the introduction of the new Restricted Vault Role setting (see above), we have changed the names for some existing roles. Please note that the permissions have not changed. Only the names have changed to avoid potential confusion.

New Favorite Entries Setting

Now in version 2023.3 you can specify your favorite entries, which are those that you use regularly. Simply select the desired entry and click the “star” icon, and it will be added to your Favorites list. You can access the list anytime from the new Favorites menu (left ribbon).

And don’t worry about losing track of your favorite entries. You can also access them in Remote Desktop Manager, Workspace (Desktop, Mobile), and the Browser Extension.

New Edit Root Vault Option

The new Edit Root Vault option lets you add relevant information, as well as modify properties that entries can inherit. Plus, the root now supports attachments and documentation, which should make your experience more functional and efficient.

This new feature is also supported when using your Hub as a data source for Remote Desktop Manager, and in Workspace (Desktop, Mobile).

New Launch RDP Sessions via Web Browser Option

This new feature lets you launch RDP sessions directly in your browser. You can also interact with the RDP interface using your mouse, keyboard, and basic Windows commands. Remote connections are secured via the Devolutions Gateway (please see note below), and execute extremely quickly.

Note: this new feature has three requirements:

1. Devolutions Gateway must be installed.
2. There must be a valid connection launching license (such as Remote Desktop Manager or Devolutions Launcher).
3. The user needs permission to execute (connect) a session.

Please also note that this new feature is currently in preview mode, which means that while it is certainly functional, it is still a work-in-progress. Your understanding is appreciated, and so is your feedback!

New User Interface Tree View Preferences

We have also improved the UI in version 2023.3. You now have more control over what is displayed in your vault(s) tree views.

Specifically, you can choose whether you want to show or hide Expired, Archived, and/or Disabled entries. To adjust the view, go into settings, select User Interface, and check/uncheck the options accordingly. You can make changes anytime. We have also made this improvement in Remote Desktop Manager!

New Authentication Setting: Enable 2-Step Number Matching

A growing problem on the cyberthreat landscape is known as “MFA fatigue attacks,” in which hackers flood a user’s mobile device with push notifications asking them to approve access. Basically, this tactic tries to irritate and inconvenience a user, and trick them into making a mistake.

In version 2023.3, we have introduced a 2-step verification number matching option. If enabled, instead of just being asked in the Authenticator App to approve access, users will be required to input a number. This setting will apply to users who have push notifications configured for their Devolutions Account and Devolutions Workspace.

Please note that unlike some companies (such as Microsoft), we have not made number matching mandatory. However, we strongly recommend this option as a way to help prevent MFA security fatigue attacks. It can be enabled/disabled in Administration > Authentication > General

Coming Soon: Provisioning with Okta Single-Sign-On (SSO).

Recently, we added Okta as an SSO authentication method. We are happy to report that the team is working on account provisioning for Okta. We do not have a specific launch date at this time, but we anticipate introducing this new functionality in late 2023/early 2024. Stay tuned!

Reminder: Domain Verification Requirement SSO Authentication

As we have mentioned previously, please remember that domain verification will be mandatory for signing in with Azure Service. This is an important security measure to protect your Azure account and business data. To complete this step, please follow these instructions: Configure SSO authentication with Microsoft Azure - Devolutions

Try the New Privileged Access Management (PAM) Module

We recently introduced a new PAM (beta) module in Devolutions Hub Business, and you’re invited to give it a try! We’ll send you the license you need, and help you get set up. To get started, simply email sales@devolutions.net.

The new PAM Module (beta) governs your Azure AD privileged accounts. Key features include:

• A secure PAM vault for managing all of your various privileged accounts
• Checkout request approval
• Automatic password reset
• Secure password injection
• Administration report

You can learn more about the new module, including a look at some workflows and screens, in this article: PAM Module in Devolutions Hub Business (Beta)

Tell Us What You Think

Many of the new and improved features in Devolutions Hub Business 2022.3 are the result of feedback from our global user community. Please continue guiding us in the right direction by telling us what you think of the latest version. Let us know what you want us to add, change, remove, or reinvent. We will rely on your input to make Devolutions Hub Business even better for you and your team.