Skip to Main Content
HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.


For more information on products and upcoming events around #dominoforever, please visit: HCL Domino Page


ADD A NEW IDEA

Clear

Ideas

Remove TLS requirement for OIDC Bearer Authentication

We are currently running into a problem on the Domino end using bearer authentication from an OIDC Provider. Our Domino servers sit behind a load balancer in a private network and the load balancer connects to Domino on port 80. All traffic to the...
25 days ago in Domino / Security 1 Needs Review

Enable Certstore to create new a new private key on certificate expiration

Some customers require to create a new private key when a TLS certificate has expired. Currently certstore only renews the certificate but the private key is kept as is. For a higher security it should be possible to optionally also replace the pr...
15 days ago in Domino / Security 0 Needs Review

Add ability to disable trusted OIDC providers without changing other data

Though this may be primarily useful for development/testing needs, it'd be very handy to have an option to disable a trusted OIDC provider in idpcat.nsf without munging the provider URL or removing mapped host names.
3 months ago in Domino / Security 1 Already Exists

ID Vault: Allow administrators to bypass "Allow password authentication" policy for vault admin operations

When the security settings policy "Allow password authentication with the ID vault" is set to No, this setting blocks not only end-user password authentication against the vault, but also administrative operations performed by authorized Domino/va...
5 months ago in Domino / Documentation  / Security 0 Needs Review

Centralized User Management for Multiple Applications

Introduce a centralized user management capability in the HCL Leap Portal that allows administrators to manage users across multiple applications from a single interface. Currently, when an administrator needs to add or manage a user across multip...
about 1 month ago in Leap / Documentation 0 Needs Review

Improve Domino Leap support for Rich Text fields in Notes databases with "Don't allow URL Open"

Domino Leap should fully support Rich Text fields from existing Notes applications, even when the source database has the "Don't allow URL Open" property enabled. Currently there are two major limitations: Rich Text images cannot be displayed wh...
2 months ago in Leap 0 Needs Review
150 VOTE

Add "Anonymous" with "No Access" as default for new database ACL

Domino's great strength has always been security. But according to latest tests, Anonymous is not added automatically when creating a new database. Adding Anonymous with "No Access" as default for new applications will cause no backwards-compatibi...
about 7 years ago in Domino / Security 5 Assessment

I’d like to see a “Sort Options” property for custom widgets.

I’d like to see a “Sort Options” property for custom widgets. I’m creating a data widget for a custom widget. It would be convenient to be able to sort by this field, but there’s no sort option among the built-in properties. Even if I create somet...
2 months ago in Leap 0 Needs Review
130 VOTE

Internet Password Security Parity with Notes Password Security Policy

Many Domino applications are now presented to the user through the browser. Many directories are strictly "Internet Users". IBM needs to invest in improving Internet Password Policy Features such that they are at least as good as Notes Password Po...
about 8 years ago in Domino / Security 7 Assessment

Option for the user to choose whether they want to set TOTP or not

Just like in other mail applications (i.e. gmail/yahoo), the user should have the ability to choose whether or not to enable TOTP. Currently, it seems the only choice is to have it enabled on the server side which applies for all (yes with TOTP op...
over 5 years ago in Domino / Security 8 Under Consideration