Passwork 6.1

The new version includes several important changes in system settings, user management, LDAP, and SSO.

System settings

Added setting "Who can create and manage administrators". Now an owner can prohibit organization administrators from managing other administrators. When restricted, administrators cannot create new ones, deactivate, edit, or reset other administrators' passwords
Added setting "Allow saving master password in browser". It allows configuring the requirement to enter the master password every time a Passwork tab in the browser is refreshed (if the master password mode is enabled)
Added policies for authorization and master passwords. Now administrators can configure requirements for authorization and master passwords set by users. Configurable options include minimum length, mandatory use of uppercase letters, numbers, and special characters. The password requirements are displayed on registration and password change pages

User management

Added the choice of authorization type. Administrators can now configure authorization types for each user in the "User Management" section: local password, domain password, and SSO
Added the ability to exclude users from LDAP synchronization — roles and deactivation won't apply to them
When an administrator resets the authorization or master password, a temporary password will be generated — users will need to change it upon login
Increased complexity of temporary passwords
Added the ability to reset 2FA separately from resetting an authorization password
When resetting the master password, active user sessions will also be reset
Changing the status can now only be done from a specific user's page
Added the ability to mass change authorization type and LDAP synchronization
Added filters for authorization types and LDAP synchronization
Added icons for authorization types
Changed the order of user settings

SSO, LDAP, licensing, and more

Added support for 2FA during SSO authorization
Added setting "Log out from IdP when user logs out from Passwork" on the SSO settings page
Removed global enabling/disabling of LDAP — now it's enough to activate the necessary AD server
Added an icon indicating LDAP synchronization for servers
Added Passwork lock to protect data when changing the server master key
Added automatic cleaning of session collection in the database to limit its size
Unverified users are no longer counted in the total number of users