This release extends SOSI’s coverage from remote hosts to internal web systems.

New features

• BrowserApp isolated browser access: Administrators can register an internal web system (a CRM, a ticketing system, and so on) as a new type of device. Users are given a locked, full-screen browser session instead of reaching the target system from their own machine. Recording, keystroke logging, auditing, permissions, and time-based access all work exactly as they do for existing devices.
• Nothing left behind after a session: The browser environment is fully reset both when a session starts and when it ends, so login state, browsing history, and downloaded files are never carried over to the next user.
• Automatic credential filling: Once the target site loads, the user’s credentials are filled in automatically. Users never need to know or type the password, and the password never enters the browser container.
• Reuse directory service credentials: If the target system authenticates against LDAP/AD, users can sign in automatically with the same credentials they use for SOSI, with no need to configure a credential for each person.
• Configurable login fields: For sites with unusual layouts, the username field, password field, and submit button can be specified in the device settings so automatic login still works.

Note: Automatic login does not support two-step flows that ask for the username first and the password on a later screen (such as Google or Microsoft accounts). SOSI skips the attempt safely on those sites, and users can still sign in themselves.