Skip to Main Content
HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.


For more information on products and upcoming events around #dominoforever, please visit: HCL Domino Page


ADD A NEW IDEA

Clear

Ideas

Enable Certstore to create new a new private key on certificate expiration

Some customers require to create a new private key when a TLS certificate has expired. Currently certstore only renews the certificate but the private key is kept as is. For a higher security it should be possible to optionally also replace the pr...
about 2 months ago in Domino / Security 0 Needs Review

Central handling of SMIME Certificates

Make SMIME certificates managable by the admin. the user's are not able to do that. Maybe the certificate file can be imported in the persondocument in names.nsf or in ID-Vault, so that the server can decrypt / sign emails?
over 8 years ago in Domino / Security 1 Assessment

Evolve management of Java Security Policy on Domino Server

Domino mandates java security controls to avoid code from performing privileged operation. Control of policies is defined by java.policy files. This is a burden for customer, partners and admins. The proposal is to implement a new Java policy prov...
over 5 years ago in Domino / Security 0 Under Consideration

Update Domino SAML IdP configuration when ADFS Token Signer Certificates has been changed

Once a year, ADFS must change it's Token Signer Certificate. 2 weeks before the expiration of it's old on, ADFS creates a second new one. Connected application will detect this second one and will change their configuration automatically. HCL Domi...
almost 7 years ago in Domino / Security 8 Under Consideration

userlicenses.nsf should include time of last access

Currently userlicenses.nsf database (if enabled in Сonfiguration Document) is collecting when user last accessed Domino servers and over which protocol, while in document there is only date of last access. Access time is always midnight 00:01. Sto...
10 months ago in Domino / Security 1 No Plans to Implement

Move the login redirect feature to the internet site document (Notes.ini setting OIDC_LOGIN_ENABLE_REDIRECT)

Domino 14.5 now supports "third-party initiated login" via a new initiate_login_uri endpoint as defined by OIDC.Core at /auth/protocol/oidc/login. In order to leverage this functionality the default redirection needs to be disabled, but that is co...
6 months ago in Domino / Security 0 Needs Review

API-Key Authentication for Domino Web Applications

Provide ability to create a API-Key records in names.nsf for third party applications to connect to Domino resources for various reasons (Mostly REST-API, Web agents, DAS, etc.) Right now customers provide a separate username password and the othe...
over 4 years ago in Domino / Security 5 Under Consideration

LDAP access to Domino directory data should restricted by users and/or servers

We need to restrict LDAP access to Domino directory data based on either the user making the request and/or the source server from which the LDAP request is sent.
2 months ago in Domino / Security 2 Needs Clarification

Password policy functioning improvements with "Check vault first then directory"

ID vault is implemented on the server and in configuration document "Check vault first then directory" is enabled. All users authenticate to the server through ID vault successfully. Use case: The web user is able to login even though the warning ...
about 2 years ago in Domino / Security 0 Needs Review

Add Quantum-Resilient Cryptography

This idea requests to add Quantum-Resilient Cryptography (Q-safe, QC or PQC) for: Encryption of NRPC-based traffic, Internet Protocols (https, smtps, imaps, ldaps, etc.), S/MIME encryption Everything else not listed here, The security ri...
almost 2 years ago in Domino / Security 4 Planning to Implement