Fixed Issues: * Fixed an issue with Connection Manager integration when the logged-in user in Connection Manager was not the same as the logged-in user in Web Password Filler. * Additional checks have been added so that secrets autofill in the proper fields. * Improved OTP detection so it autofills correctly. * Resolved an autofill issue that stopped working in release 3.11.7 for some sites. * Resolved an issue where the message “Unable to autofill secret from selected secret” appeared when launching a session-recorded secret for the first time after WPF installation. * Fixed an issue where a site with mapped fields would not autofill after launch.

ISSUES RESOLVED * Secret checkin was not logging users out on some Microsoft sites. * Added check to header tag of form to identify if login form. * No longer detects the username field of the "Add Person" form on Okta portal as a login field. * Fixed an issue with being unable to add a secret if unrequired fields were left blank. * Resolved an issue where TOTP was not autofilling on some sites. * Fixed an issue with auto-filling on AWS Identity Center login. * Fixed an issue where only visible input fields were being checked before comparing against the threshold value for login form detection. * Password not autofilling on some sites. * The password field now correctly autofills with the user's password instead of being mistakenly treated as a TOTP field on sites where this occurred. * Clarified the messages displayed to users when a launch or autofill cannot occur due to the secret requiring Incognito mode. * Improves handling of launch actions from Connection Manager

Resolved the issue where passwords were immediately cleared after being autofilled on certain Microsoft SSO sites.

Improvements * Added support for launching web sessions from Connection Manager 2.7 planned for release in June 2025. Fixed Issues * An issue with password generation from the context menu has been resolved. * When launching from an allow list, the audit log now shows the URL selected from the list. * WPF now includes 'Sign In' text near fields as an indicator signal for login form detection. * Fixed a conflict between Web Password Filler and Menlo Remote Browser Isolation that caused usernames and passwords to be populated incorrectly. * Input threshold now properly prevents autofilling if a page contains more fields than the threshold value. * WPF is now able to autofill TOTP for the Okta site. * WPF now correctly autofills TOTP during platform login.

Fixed Issues * The 'Update and Save' pop-up did not appear on some sites. * Fixed an issue where, if the Native Messaging Host was configured, users could only select domains registered in the settings.json file. * The password was not being autofilled correctly on some Safari browser versions. * Web Password Filler would prevent the login pop-up from appearing when idle. * A 'Log in and continue' pop-up has been added if WPF is not configured with any sites, or has not been logged in. * If a user attempts to autofill using a secret that does not have a web launcher mapped, the system now displays 'Unable to autofill from the selected Secret ' instead of silently failing. * WPF now automatically populates the username field and displays the Delinea WPF icon during logins on Data Domain System Manager (DD2) DELL EMC devices. * Fixed an issue where the username would not autofill properly on Sophos.

Improvements * The Delinea icon is now visible on the username field on any site when Exact Match is enabled and there are no matching secrets and prompts to save credentials work properly in this scenario. Fixed Issues * The password field was not getting auto-filled on some sites. * On some sites, the Secret list appeared in the right corner of the site when the Delinea icon was clicked in the username field. * The Save and Update Password pop-ups were not working properly on some sites. * Web Password Filler was not submitting tickets according to the configured settings. * Fixed the security pop-up, which now displays and aligns properly on the Screenrant site. * Delinea icon was not visible on the Supermicro device management login page. * Two error messages were being displayed instead of one when entering the ticket number for a Service Now ticketing system on a secret that requires comment to view." * The TOTP was not autofilling on AWS logins.

Improvements * Improved security of password handling when adding new secrets. * The prompt to add new secrets now automatically closes after 3 minutes. Fixed Issues * For some login pages, the WPF icon was not clickable and users could not display the autofill suggestions. * After closing recorded sessions for myapps.microsoft.com Web Password Filler was unable to force the site to log out. * WPF did not autofill the TOTP code on the AWS console login page. * Prevent scripts on pages that clear login fields from automatically clearing fields after WPF autofills. * Web Password Filler did not autofill credentials on VMware vRealize. * The secret URL overlapped with the secret name in the autofill suggestions list on some sites. * Fixed issues where the WPF icon was incorrectly appearing on input fields within Secret Server and Delinea Platform.

Improvements * Web Password Filler now auto-fills credentials on all the Secret Server and Delinea Platform login pages. * WPF no longer automatically logs out when a Secret Server or Platform tab is logged out or expires due to inactivity. Fixed Issues * Web Password Filler would automatically save a secret if there was only one active template with a URL field. It now displays the Add Secret dialog so users can switch the folder before saving. * The WPF icon was not appearing on the Verint login page. * The token refresh interval in WPF has been changed to prevent issues caused by the refresh occurring after the access token has expired. * WPF automatically filled the username into the MFA field on the Jira Service Management login page.

Improvements * Web Password Filler has enhanced how it prioritizes and sorts autofill suggestions: * Prioritizes exact matches of the URL first, with favorites that match the URL appearing first. * Sorts secrets based on their URL hierarchy. * Fixed a potential XSS vulnerability when rendering field names during a new secret creation. Fixed Issues * Web Password Filler displayed an error message when users added a secret using a secret template where two fields have the same name. * Changed how Web Password Filler sets the value of TOTP fields to fix an issue where some websites did not detect that a value was entered. * WPF failed to log users out of the site when secret checkout expired in incognito mode. * WPF incorrectly identified another field on the site as a login field and auto-populated the credentials into that field. * WPF failed to log out users from the site when checkout expired or when forcefully checked in.

Fixed Issues * Web Password Filler did not set the folder for new secrets to the user's personal folder by default.

Enhancements * Allow login pages using a search field as the username to be identified and autofilled if the field is manually mapped. * Updated session expiration messages to include the site of the tabs that are being closed. Bug Fixes * Fixed an issue autofilling FortiMail login. * Fixed an issue where recorded sessions from secrets requiring checkout would be terminated before the checkout expired. This occurred when the secret also required MFA and the MFA passthrough time was less than the checkout time. * Fixed an issue where WPF could log out prematurely when sharing a login session with a web login in a browser tab. * Changed WPF login for Platform so that WPF will not log out if a Platform session in a browser tab times out due to inactivity in the tab. This also means that Platform will not automatically be logged in if opened in the browser while WPF is logged in. * Fixed an issue detecting the username field on some Cisco login pages. * Fixed an issue with Platform logins that use Microsoft SSO when Native Messaging Host is installed.

Changes and Improvements * Removed unnecessary extra calls to search-by-url that are affecting performance for some users. * Updated to handle new 401 status code results sent by Secret Server API calls as invalid token in addition to 403 status codes returned by previous versions of Secret Server.

IMPROVEMENTS * Due to new security restrictions in the latest versions of Safari, the browser can no longer differentiate between different types of connection errors. As a result, Web Password Filler now displays a more general error message: 'Unable to reach server. Verify that the server URL is correct, and that the server has a valid certificate.' This message appears for both certificate and network issues. * The caching of autofill matches have been removed. Web Password Filler now calls Secret Server every time it finds a login page. This change prevents issues where the system did not present new secrets to users for autofill. BUG FIXES * A bug in the caching logic caused some secrets to not show up in the autofill match list. * The refresh icon appeared in the popup if the user did not have the 'Add Secret' permission and no secrets were present for that site. * Web Password Filler would sometimes display the 'Add Secret' dialog in the wrong browser window when adding a secret. * When working in Mimecast, the Web Password Filler icon was displayed for some email fields, even though those fields were not valid for autofill. * https://sso.cloud.com would not autofill in Web Password Filler. *Fixed an issue that caused visual corruption in some recorded sessions. *When using the Web Password Filler popup window to generate a password, the generated password contained duplicate letters. The passwords generated did not follow the Secret Server password policy. *The system sometimes displayed 404 errors to the user when making background network calls to check the validity of login URLs. *Updated the autofill field detection logic to handle login forms in Italian. *Web Password Filler did not close launched Chrome sessions upon secret check in or when the secret timeout limit was reached. *Web Password Filler reloaded the username page after the user submitted the username on some sites. * An OTP API call occurred every 30 seconds, even if the user did not have the secret information page open.

Bug Fixes * Fixed an issue where launching a recorded secret with a list of URLs to a redirected URL was not autofilling properly. * Fixed an issue with the copy password functionality in the new autofill menu, allowing users to successfully copy passwords from it. * Updated the OTP field detection logic to prevent a case where a password field was misinterpreted as an OTP field 3.9.3 Fixes the above issues in 3.9. For full 3.9 release notes, see here: https://docs.delinea.com/online-help/web-password-filler/release-notes/3.9.0.htm

Improvements * When the Web Password Filler token expires and cannot be renewed, and the active recordings are still ongoing, the system will redirect the user to the session timeout page. This page will inform the user that the ongoing recording has been terminated. * When a user attempts to log out from Secret Server or the Platform portal while a session recording is ongoing, they will see a confirmation dialog. This dialog will give the user the choice to either remain logged in or proceed with logging out. * Web Password Filler now displays the folder name under Secret Details instead of the folder ID. When a user hovers the mouse over folders, the folder path is revealed as a tooltip. Shared secrets with restricted access will show the folder name as 'Restricted Folder'. Root folders will display the folder name as 'None', and when hovering the mouse over a root folder, it will display as 'No Folder'. * When a user attempts to launch from a different server than the one currently logged into in Web Password Filler and there are active recordings, a confirmation dialog will appear. This dialog will give the user the choice to either launch and close the existing recordings or cancel the launch and keep recording. Bug Fixes * Web Password Filler would continuously open new tabs if users turned off the 'Secret Server Login New Window' setting through the Native Messaging Host. * When users selected the '+' button on the Web Password Filler pop-up to add a secret, it would close the pop-up and not display the 'Add Secret' dialog. * The Web Password Filler pop-up displayed an invalid logo when saving updated user inputs for username or password. * Corrected an issue where the Web Password Filler required the 'Session Recording Limit' and 'Input Threshold' drop-down values to be the same number. * Previously, when Web Password Filler encountered an error logging in it displayed a continually connecting window. In this release, Web Password Filler shows a connecting window with an error message. * Web Password Filler sometimes automatically logged in when a user logged into Secret Server or Platform in the browser, even though the current URL in Web Password Filler did not match. * Previously, if the platform user had clicked the 'Cancel' button during a challenge, logged out, then attempted to log in again while the Web Password Filler pop-up was open, the user encountered a challenge pop-up instead of logging in. * When using Safari 17 the Web Password Filler pop-up would close once the MFA challenge was completed. * When Safari 17.1 was used, it displayed font weights incorrectly for field labels. * In Safari 17.1, it did not show a warning when a user launched an incognito tab and the extension was not allowed in private browsing mode. * In Safari 17.1, certain images in Web Password Filler failed to display. * Web Password Filler experienced a timing issue with the refresh of Platform tokens, causing it to log out after 1 hour. Known Issue * If Web Password Filler is logged into Platform and a browser tab is open to the same Platform tenant that is logged out or times out, Web Password Filler will not be able to refresh its token and will log out. This will be fixed in a future release.

Bug Fixes * Fixed an issue in Safari 17.1 on the Mac Sonoma platform where the login window stayed minimized in the task bar. * Fixed an issue when logged into Platform where the user would get logged out before their session expired. * Fixed an issue so that users can now launch a secret sucessfully if Native Messaging Host is configured using a url without any protocol.

Features Users will now see a list of Recent web secrets that is consistent with the Recent secrets list they see in their Secret Server web portal view. Users will now see a list of Favorite web secrets that is consistent with the Favorite secrets list they see in their Secret Server web portal view. Users can search for any of their web secrets from the Recent list in the Web Password Filler using any searchable field. Improvements Web Password Filler now displays a message when launched from a different Secret Server vault than what is configured for that Web Password Filler by the Native Messaging Host Bug Fixes Fixed an issue where the Save button was getting enabled after filling in mandatory fields in the Add Secret window. Fixed an issue where Web Password Filler displayed an "Platform Identity Authentication has failed" error message when logged into the Delinea Platform. Fixed an issue with slow page performance when Web Password Filler is enabled. Fixed an issue where Web Password Filler was accepting a "0" value in numerical dropdown fields. Fixed an issue where Web Password Filler was displaying improper styling on certain sites. Fixed an issue where keyboard shortcuts were note working correctly. Fixed an issue where Web Password Filler failed to launch a secret for users who did not have the Add Secret permissions. Fixed an issue where users were unable to click the Login button. Fixed an issue where Web Password Filler was not auto-filling BitBucket login pages and for a few other sites. Fixed an issue where the Add Secret button was not disabled on blank pages. Fixed an issue where Save and Update features were not working on some sites. Fixed an issue where Web Password Filler displayed an "Invalid URL" error message while refreshing secret. Fixed an issue where Web Password Filler was adding extra spaces when copying the username to the clipboard. Fixed an issue where Web Password Filler was not displaying a "Bad Request" message if a user entered an invalid URL. Fixed an issue where the copy button was causing URL text or usernames to be overridden.

Features * When logged into the Delinea Platform, users can access secrets guarded by an MFA challenge. Upon successful completion of the MFA challenge, users can launch the site, copy the password if permitted, see secret details, and complete other allowed actions. General Improvements * Improved session recording stability. Security Improvements * Updated third-party libraries to address discovered security vulnerabilities. Bug Fixes * Fixed an issue where passwords were not being auto-filled on certain sites. * Fixed an issue where the Web Password Filler icon was appearing in fields that were not login form fields. * Fixed an issue where where the _Check in_ functionality was not logging out users from the site when they checked in the secret. * Fixed an issue where the session recording was not stopping when the user was logged out due to check out expiring. * Fixed an issue where users were not able to log in to Web Password Filler automatically via SAML. * Fixed an issue where all URL fields were being auto-filled with the site URL value. * Fixed a display issue with the Web Password Filler's main form that occurred after Chrome upgraded to version 116. Known Issues * As a result of fixing the issue with false positive field matches, secrets are not being auto-filled on Microsens portals. This will be fixed in the next release.

Improvements * When users attempt to access a secret that is guarded by MFA, they will see a message that the secret is blocked by an MFA challenge. * Added a usability improvement to make the drop down URL field less confusing when there is no URL selected. * Added a toggle to enable/disable cursor tracking on session recording. Bug Fixes * Fixed an issue where a Continue button was being displayed in the Comment required popup, instead of Checkout. * Fixed an issue where Web Password Filler was not launching a secret without an http protocol

Features * Users can login to their Delinea Platform tenant URLs with Web Password Filler. Web Password Filler will connect seamlessly to their Platform tenant vault and users will be able to use web-based secrets in the vault in the same way as they do today with a direct Secret Server vault integration. Bug Fixes * Fixed an issue where the self-signed certificate message was being displayed on various sites with valid certificates.

Bug Fixes *Fixed an issue where Web Password Filler was not filling out user credentials for certain sites. *Fixed an issue where the Add Secret window remained open after logging out of Web Password Filler. *Fixed an issue where Web Password Filler was not autofilling secrets enabled to work only in incognito mode.

Features * If a user enters a Secret Server URL without a protocol, Web Password Filler will set _https://_ as the default protocol and will allow the user to login as if they entered _https://_ from the outset. Security Improvements * Added security improvements that prevent malicious pages from exploiting Web Password Filler functionality to change the URL of a user's Secret Server and read user requests to fill out forms. Bug Fixes * Fixed an issue where Web Password Filler was cropping the session recording videos * Fixed an issue where Web Password Filler was not filling out passwords for certain sites * Fixed and issue where the _Add Secret_ button was enabled for users who did not have permissions to add secrets

Features Added: * Web Password Filler now redirects Secret Server URLs containing _http_ to _https_ * If a user mistakenly types _https:/_ or _https:///_ in the URL field, Web Password Filler will auto-correct these to _https://_ Bug Fixes: * Fixed an issue where nothing would happen when the user clicked "+" to add a secret on Mac * Fixed an issue where Web Password Filler would not auto-populate when using URL lists * Fixed an issue where users with _View Only_ permissions were unable to use URL lists * Fixed an issue where Web Password Filler was not properly handling special characters when adding a secret * Fixed an issue where the _Copy Generated Password_ functionality was not working * Fixed an issue where session processing would take too long for sites mentioned in extended mapping * Fixed an issue where Web Password Filler was overwriting other mapped fields if the input type was "password" * Fixed an issue where NMH- when NMH is configured SS Url dropdown should not appear on configuration page

Fixed an issue where users were denied access to Viewing Secrets, Adding Secrets and Editing Secrets in Web Password Filler version 3.2 Fixed an issue where Web Password Filler was prompting users to create a secret when logging into a site that already has a secret Fixed an issue where the web launcher was not honoring field mapping for the Username Fixed an issue where Web Password Filler was not working properly on the VMWare Horizon login page

UI enhancement for Comment Require popup has been added Improve usability with ticketing system integrations Add support for websites : https://auth.ncloud.com, https://reporting.retire-it.com, https://sso.redhat.com Launching "Web Launchers required incognito mode" enabled secret from Recent tab, opens in same browser has been fixed SS URL should get added into SS URL dropdown once login to WPF by Switch Secret Server method Bugs Fixed: a) WPF does not fill username and password when launching site from URL field and Session Recording is enabled on the secret. b) SS - google profile gets log out when session recording is enabled. c) WPF does not auto fill websites launched from SSC secret when Web Launcher requires Incognito Mode is enabled