Release Date: 12 Nov, 2026
Introduction
This document provides an overview of the new features, enhancements, and resolved issues in Sectona PAM version 6.1.0. It highlights key improvements in functionality, performance, and security.
What's New?
API
[SPSL-5824] Introduced a new API to retrieve session details, enabling external systems to access session-related information.
Asset and Account Management
[SPSL-5524] Enhanced Just-in-Time (JIT) Database Access with support for enabling and disabling access, provisioning and deprovisioning, and role-based privilege elevation.
[SPSL-5809] Enhanced the Asset page to display associated target machine, server, or endpoint details for installed WMON/UMON Agents.
[SPSL-5875] Introduced the Diffie-Hellman Key Length setting under Asset Security Settings for SSH connections, supporting custom key lengths of up to 8192 bits.
[SPSL-5879] Updated the Bulk Update Excel template to include the Account Owner field, enabling administrators to perform bulk account ownership updates.
[SPSL-5888] Introduced Microsoft Azure Entra ID support in AD Sync to synchronize accounts and servers.
[SPSL-5893] Enabled administrators to modify the linked assets of existing accounts.
[SPSL-5920] Enhanced Exclusive Mapping with search and filtering capabilities based on Database Instance Name. This helps administrators identify the correct database instance when multiple assets share the same IP address, hostname, or account name.
[SPSL-5978] Enhanced Manage Assets search functionality to support searching assets by description.
[SPSL-5983] Introduced an "Ignore if Failed" option for password rotation dependency processes. SIEM events and notification alerts are also generated when a dependency process fails.
[SPSL-6041] Added filtering capabilities to the Accounts Password History section, allowing users to retrieve records based on selected filter criteria.
Discovery
[SPSL-5530] Introduced privileged account discovery with associated permissions and group memberships, enabling administrators to review and audit privileged account access.
[SPSL-5831] Enhanced Asset Discovery, Account Discovery, and SSH Key discovery by introducing Authentication Type and Status columns, along with a Run Now action for immediate execution.
[SPSL-5895] Enhanced Azure Entra ID user discovery to retrieve Company, Department, and Manager attributes and populate the corresponding fields under Additional Info in user profiles.
Event, Monitoring and Notification
[SPSL-5329] Introduced SIEM logging for privilege elevation activities performed through WMON and Sudo. The logs capture user details, session information, elevation method, timestamp, and operation outcome to support auditing and security monitoring.
[SPSL-5817] Extended SIEM Integration to support the API protocol.
[SPSL-5855] Added the Session Risk Found (520) event to SIEM forwarding, enabling session risk information to be forwarded to configured SIEM solutions.
Password Management
[SPSL-5915] Enhanced password generation to ensure that generated passwords comply with the configured complexity requirements during password changes.
Policies and Workflow
[SPSL-4449] Added the "Request For" field to workflow request details, making it easier to identify the entity associated with a request.
[SPSL-5812] Introduced filtering capabilities in Workflow Management Logs to simplify record searching and retrieval.
Reports and Dashboard
[SPSL-2933] Introduced dashboard export functionality, allowing users to download individual graphs or export the entire dashboard, including all graphs and widgets, into a single file.
[SPSL-5349] Introduced the PCI DSS Compliance Report, providing a structured overview of compliance status, implemented requirements, and identified gaps against PCI DSS standards for protecting cardholder data.
[SPSL-5392] Added an export option for the Executive Summary in Analytics, enabling users to export key metrics and insights in a consolidated format.
[SPSL-5806] Enhanced report scheduling to display the next scheduled execution date and time, along with the date and time format for the "Initiate Report From" field.
[SPSL-5807] Added support for including pie chart visualizations in exported PAM Analytics reports.
[SPSL-5835] Added Custom Attribute 1 and Custom Attribute 2 as selectable data points in User Reports.
[SPSL-5845] Added the “User Alias” field to the User Inventory Report.
Session and Task Management
[SPSL-5685] Enhanced SSH, SSH PuTTY, and SSHD sessions to support double-digit account selection when using the “sudo su” command.
[SPSL-5803] Optimized RDP over Browser sessions to improve display quality, minimize latency, and reduce video recording file sizes.
[SPSL-5822] Introduced OTP-based authentication for users accessing collaboration sessions through shared links.
[SPSL-5830] Added Microsoft Entra ID authentication support for accessing Azure Windows Virtual Machines through RDP.
[SPSL-5880] Improved keyboard input handling in RDP over Browser sessions for Windows Virtual Desktop (WVD) and Azure Virtual Desktop (AVD) environments.
[SPSL-6044] Optimized the processing and retrieval of Risk View information on the Session page to improve loading performance.
System and General Configuration
[SPSL-5339] Removed Firefox from the Supported Browser Types dropdown under Access Type configuration.
[SPSL-5368] Automated WMON Agent upgrades following PAM upgrades, ensuring agent compatibility without requiring manual intervention.
[SPSL-5811] Enhanced application service logs to capture the user, action, and timestamp whenever a service is manually started, stopped, or triggered.
[SPSL-5826] Introduced Unix Directory Store integration with Linux IPA and OpenLDAP, supporting dynamic user, group, and asset mapping, password changes, user validation, asset discovery, and account discovery.
[SPSL-5925] Updated the supported MySQL Server version to 8.4.11.
[SPSL-5970] Introduced configurable automatic deletion of archived video logs after a specified retention period for both Local Storage and Cloud Storage.
[SPSL-5980] Enabled video log playback and export from any application server.
[SPSL-6051] Enabled App Services to be started, stopped, and triggered from any application node.
User Interface
[SPSL-5343] Introduced “Dark Mode” support across PAM and Platform Configuration (PC), providing users with an enhanced viewing experience.
[SPSL-5511] Added the ability to update Secret and Certificate accounts directly from My Access.
[SPSL-5569] Introduced a configurable option to hide the “IP Address” column on the My Access page.
[SPSL-5801] Added the “Created By” username to the delegated task screen, allowing users to identify who delegated a task.
[SPSL-5802] Added an information icon against Task Type in Task Configuration. Users can now view the available Task Library commands through a popup while creating a task.
[SPSL-5832] Restricted copy, cut, and paste operations in sensitive login fields, requiring users to manually enter values in critical authentication fields.
[SPSL-5936] Added a Delete option for Vault API Registrations, allowing authorized administrators to remove existing registrations.
[SPSL-6038] Added Configuration and Export Parameter tabs to Video Recording settings.
User Authentication and Management
[SPSL-5805] Enhanced Satellite Vault access control to automatically terminate active user sessions when the configured access window expires. Users are also redirected to the login page when refreshing the session.
[SPSL-5823] Introduced Thin Client support for macOS and Unix-based endpoints under Download Utilities.
[SPSL-5866] Added an option in Platform Configuration to automatically disable expired users authenticated through Sectona Authentication. This functionality can be configured through the User Lockout Policy.
[SPSL-5881] Enabled administrators to assign multiple users to a selected User Access Policy.
[SPSL-5902] Enhanced “UserStatusService” to validate and retrieve user status and details for users configured through Azure Entra ID, in addition to Directory Store.
[SPSL-5981] Introduced password reset functionality through email-based OTP verification, with a default password reset link validity of 15 minutes.
Fixed Issues
This release addresses several reported issues across different modules, improving system reliability, operational consistency, and overall user experience.
API
[SPSL-5951] Resolved multiple user and asset API issues related to field and permission validation, user status, database instance validation, and missing or incorrect account details in API responses.
Event, Monitoring and Notification
[SPSL-5856] Fixed an issue where the MSP License Assignment notification incorrectly displayed the instance status as "Not Assigned", even when the instance was already assigned to the user.
[SPSL-5899] Resolved an issue where Session Completed notifications were not triggered when multiple IP addresses were configured in the Primary IP attribute filter.
[SPSL-6033] Fixed an issue where notifications were sent only to the first email address configured in the Recipient Email field instead of being delivered to all configured recipients.
Policies and Workflow
[SPSL-5934] Fixed an issue where the User Type field was missing from the User Details page on the Request/Approver screen, preventing approvers from viewing the user's type before approving or rejecting a request.
[SPSL-5969] Fixed an issue where approval expiry was calculated using the selected Duration instead of the configured Start On and End On date and time of the workflow request.
Reports and Dashboard
[SPSL-5945] Resolved multiple report and dashboard issues related to incorrect data, missing fields, and errors in report filtering and generation.
Session and Task Management
[SPSL-5859] Fixed an issue where SFTP sessions failed to establish connections when Key-Based Authentication was configured with a valid authentication key.
[SPSL-6019] Resolved file closing issues in SFTP/FTP sessions.
[SPSL-6060] Fixed an issue where text entered through paste operations was duplicated in the SSH Terminal.
[SPSL-6062] Resolved multiple file upload failures in SFTP when the parent directory was selected.
System and General Configuration
[SPSL-5947] Resolved multiple System Trail issues involving incorrect actions, missing details, incorrect categorization, and missing audit records across various functionalities.
[SPSL-5965] Fixed file download issues in Microsoft Edge for certain URL-based sessions.
[SPSL-5979] Resolved an issue where Direct Manager functionality based on Active Directory configuration failed when the directory connection was configured to use LDAPS.
[SPSL-6058] Optimized the system backup process to reduce memory consumption on the Vault Storage Host.
User Interface
[SPSL-5710] Fixed an issue where system-defined reports were not displayed in the Report dropdown for non-default instances.
[SPSL-5950] Resolved multiple UI issues related to sorting, navigation, validation, and field population across various modules.
Other Issues
[SPSL-5876] Fixed an issue affecting WMON keyboard activity logging.
[SPSL-5968] Resolved an issue where “PasswordManagementService” failed to rotate AWS access keys for assets configured with the AWS asset type.