Many companies use industry standard SAML authentication to log users in and set permissions based on groups.

Currently theres no option to import active directory groups.

Would be very comfortable to assign/grant roles/privileges to active directory users and groups.

So it´s possible to manage privileges in a central way through active directory.

When you are on the way / out of office and a customer is calling you saying "my server has gone away" or asking for a password, then it is very hard to get it on a smartphone/tablet without a mobile web interface.

It would be cool to have Single sign on to Active Directory.

The LDAP is working quite cool, but users still need to enter username and password.

I could see this as a HUGE plus!! Possibly could be implemented with some teampass changes and some kind of KeePass plug-in that would allow a KeePass DB to sync to TeamPass based on the permissions and access according to the authenticating TeamPass user?? KeePass already has so manyclients for desktop and mobile devices. This would give the best of both worlds. The multi-user back-end of TeamPass (and web access) and open the door to the many KeePass client usage scenarios!!!

I'm not a developer so absolutly no idea how much work on either the TeamPass or KeePass side this would take.

A function in Teampass to check LDAP/Active Directory Group membership before granting access to Teampass.

In larger organizations you (probably) don't want the whole Active Directory/LDAP User container to have access to Teampass. This could be managed by creating a Active Directory Group where it's members have access to Teampass and let Teampass check this group membership.

Functional features

(need to have):

• When logging in for the first time with an Active Directory account, the account should be a member of the AD group specified in de settings section. If not, no account should be created in Teampass. An email should be sent to the administrator and a line written in the Log.(User "X" which isn't a member of group [teampass] tried to access Teampass.)
• When logging in normally (after the account has been created), the user should always be checked if he/she is a member of the group specified in de settings section, if not, the account should be locked. an email should be sent to the administrator telling that user x is no longer a group member and the teampass account is locked. Probably some logging should also be made... for auditing purposes.

(Nice to have)

Further implementation of LDAP/|Active Directory in Teampass. Assigning LDAP/AD groups to Roles, this way when a Role is created in Teampass you can assign a AD group to it. Management can be done by adding or removing users from the specific LDAP/AD group.

We discussed the (need to have) feature by Email, but i never posted an official feature request.

Regards, Roru69

Hello,

first of all: TeamPass is great, so I can finally manage the passwords of the family centrally!

It would be great if there where a browser plugin for Chrome, with which one could enjoy the typical luxury features. For example:

- Automatic login with saved user names & passwords

- Create new password

- Automatically add username & passwords into database when logging on to a new page

- ... I think the community have lots of more ideas

For Firefox, I've seen one, but it does not seem to work with the current version of TeamPass. I am Chrome User and I have only written about Firefox that the Firefox Users does not stand out. :)

Greetings,

Marcus

Hello,

Can you please add Yubikey authentification on Teampass? It will be a very great function!

For large infrastructures is Kerberos a valid and widely used authentication method.
That means in this case:

• Kerberos Authentication for users instead of a password
• Kerberos Authentication with LDAP and thier users
• other use cases are possible

Use the HIBP Pwned Password API (with k-anonymity) to check whether passwords being added/edited have been breached before and display a warning if they have.

Documentation on the API is here:

https://haveibeenpwned.com/API/v2#SearchingPwnedPasswordsByRange