109 results found

1. Access Control List for Web Interface & Mobile App

   We are a .org wishing to implement Mattermost.

   We would like only a specific group of "internal" users to be allowed to access the server from outside the firewall. In addition, we would also like a specific group of external clients to be able to access the server through the mobile app.

   I understand one method is to use a VPN. However, an additional app to put on someone's device may be a burden.

   The Novell/Micro Focus Product Webaccess has a feature that allows the admin to specify users via an .xml file.

   A snippet:

   "Controlling WebAccess Usage:

   You can control which users can use WebAccess to access their GroupWise mailboxes. By default, all GroupWise users can use WebAccess.

   You can control access based on the domain or post office where the user’s mailbox is located. You can control access for related users based on groups, and you can control access for individual users.

   Access control is established through the gwac.xml file, located in the same folder with the webacc.cfg file.

   The default gwac.xml file illustrates the following options:

   <!-- To allow access to all EXCEPT a few, use this technique. -->
   <!--
   <gwac access="prevent">
   <domain name="domain1" />
   <postOffice name="po2.domain2" />
   <user name="jdoe.po3.domain3" />
   <distributionList name="helpdesk.po4.domain4" />
   <resource name="confroom.po4.domain4" />
   </gwac>
   -->

   <!-- To prevent access to all EXCEPT a few, use this technique -->
   <!--
   <gwac access="allow">
   <domain name="domain1" />
   <postOffice name="po2.domain2" />
   <user name="jdoe.po3.domain3" />
   <distributionList name="helpdesk.po4.domain4" />
   <resource name="confroom.po4.domain4" />
   </gwac>
   -->
   You can use any ASCII text editor that you prefer to edit the gwac.xml file.

   Open the gwac.xml file in a text editor.

   Typically, you use the gwac.xml file to override the default of allowing all users to use WebAccess.

   Remove the comment marker lines (<!-- and -->) around the section that you want to use.

   (Optional) Under the <gwac access="prevent"> line, create one or more lines to prevent users in one or more domains from using WebAccess, for example:

   <domain name="provo5"/>
   <domain name="provo6"/>
   (Optional) Create one or more lines to prevent users in one or more post offices from using WebAccess, for example:

   <postOffice name="interns.provo1"/>
   <postOffice name="temps.provo1"/>
   Specify the post office in post_office.domain format.

   (Optional) Create one or more lines to prevent users in one or more groups from using WebAccess, for example:

   <distributionList name="webaccessdenied.admin.provo1"/>
   Specify the group in group.post_office.domain format.

   Using one or more groups is the most flexible approach to access control for WebAccess. The group belongs to a specific post office (for example, the one you belong to), but it can include GroupWise users located anywhere in your GroupWise system. By using a group, you can easily modify access control for specific users by modifying the group in the GroupWise Admin console, rather than needed to modify the gwac.xml file whenever access control changes are needed. For more information about groups, see Section 56.0, Creating and Managing Groups.

   (Optional) Create one or more lines to prevent specific users from using WebAccess, for example:

   <user name="sjones.interns.provo1"/>
   <user name="gbock.interns.provo1"/>
   (Conditional) If you want to prevent most users and allow only specified users, use a <gwac access="allow"> line instead of a <gwac access="prevent"> line.

   Save the gwac.xml file."

   Please consider.

   Original Request:
   http://forum.mattermost.org/t/restricting-users-from-accessing-mattermost-outside-firewall/2617

   We are a .org wishing to implement Mattermost.

   We would like only a specific group of "internal" users to be allowed to access the server from outside the firewall. In addition, we would also like a specific group of external clients to be able to access the server through the mobile app.

   I understand one method is to use a VPN. However, an additional app to put on someone's device may be a burden.

   The Novell/Micro Focus Product Webaccess has a feature that allows the admin to specify users via an .xml file.

   A snippet:

   "Controlling WebAccess Usage:

   You can… more

   9 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   1 comment  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

2. Implement 2 Factor Authentication using yubikey Hardware Token

   Support for 2 Factor Authentication using yubikey (https://www.yubico.com/products/yubikey-hardware/) in addition to the software MFA available in Enterprise Edition: https://docs.mattermost.com/deployment/auth.html

   48 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   1 comment  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

3. New Channel Announcements

   When people create new channels within a team, it would be great to have a popup that shows team members within the channel a screen something like "New Channels created since your last visit, refresh, etc..."

   What we are finding is people are creating new channels within Teams, yet no one knows about them unless they click on the More link within the team.

   14 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   3 comments  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

4. make administrators able to look into private chats

   In corporate environments it is sometimes necessary on legal grounds to check an employees communication. Usually the management asks the IT therefor to deliver ones communication. Currently an administrator is neither able to view the existing private chats from any user nor is there an export function to extract all users content from the database

   57 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   17 comments  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

5. EE: OAuth2 for generic identity provider

   Add support for a generic OAuth2 provider for Mattermost Enterprise Edition, in addition to other single-sign-on features for enterprises.

   241 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   15 comments  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close
   started  ·  Adminmattermost.org (Moderator, Mattermost) responded

   Work has begun to support OpenID Connect, which enables one to use any OAuth 2.0 identity solution. It is planned for Mattermost Cloud and Mattermost Self-Managed E20.

6. Atlassian Crowd Support

   Atlassian Crowd is the SSO and central user-manager for all Atlassian Products. Its provides an REST and SOAP API.

   Following features would be nice:
   - Synchronize users with crowd
   - Use crowd Cookie to authenticate user

   Also see:
   - Atlassican Crowd Features: https://www.atlassian.com/software/crowd/overview/key-features
   - Atlassican Crowd Pricing: https://www.atlassian.com/software/crowd/pricing

   50 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   2 comments  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

7. Purge Inactive Users

   It would be great to be able to purge users who have not logged into the site in a definable window.

   7 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   0 comments  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

8. Microsoft Active Directory SSO with reverse proxy REMOTE_USER

   For advanced enterprises with sophisticated authentication requirements, this feature would allow authentication through REMOTE_USER information passed in via HTTP headers

   This feature requires a fundamental change to the Mattermost user model so that users can exist outside of teams.

   Several threads have discussed this feature:
   - https://forum.mattermost.org/t/active-directory-sso-through-a-reverse-proxys-remote-user/295
   - https://forum.mattermost.org/t/client-side-certificate-authentication/1174

   7 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   1 comment  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

9. Microsoft MS-CAPI / PKCS 11 Support

   For advanced enterprises, MS-CAPI / PKCS 11 support would allow additional enterprise authentication options across all native clients plus the web experience.

   4 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   0 comments  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

10. Prompt email-based accounts to re-auth using LDAP during migration period

    Our organization wishes to use the new bulk export tool to migrate teams and users from our pilot server. This server used email-based accounts, and we are now using LDAP authentication on the new Enterprise server.

    All of these accounts should have LDAP, but were created using email addresses that do not always map. We want users to be able to log in once with their old email authentication, then be prompted to log in again using their LDAP credentials.

    4 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    0 comments  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

11. Enable Team invite link when account creation is set to false for private teams

    Team invite link is not available when account creation is set to false.
    Inviting users manually via email is tedious, it would be easy if the team invite link is available.

    3 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    1 comment  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

12. Re-Add yourself to a channel you left

    We would like to have a feature where you can add yourself back to a channel that you have left.

    1 vote

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    1 comment  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

13. Chatting to Golang Bot through direct message

    Hello, I have the golang bot implemented into a mattermost channel.
    It would be helpful to have an option for users to ask the bot questions in a Direct message as opposed to just a public channel.
    I feel that this would encourage users to use the bot more and help shy users as well. That way there can be some sort of privacy between users.
    Also, a way to have a log for Admins to keep track of what questions are being asked will be helpful in developing the bot further.

    36 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    0 comments  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

14. EE: Provide controls for creation of public and private channels at the team level

    The global channel settings aren't flexible enough create teams with differing levels of channel security. Please consider adding the public & private channel settings at the team level.

    Simplistic example:

     Team A: invite only with the creation of public rooms disabled
     Team B: public team, with the creation of public rooms enabled
     Team C: public room with the creation of public rooms disabled
    

    3 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    0 comments  ·  Mattermost Enterprise Edition  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

15. Report duplicate AD/LDAP information rather than setting usernames to random strings every hour

    When the AD/LDAP User Filter is too permissive, multiple user objects with the same Email Attribute may be returned. When this happens, and the Username Attribute is not present on the returned value, Mattermost may reset the username of the existing user with the same email address to a random string. This repeats every 60 minutes (or whatever the Synchronization Interval is set to).

    For example, if two LDAP objects are returned:
    { userclass=contact, email=myusername@example.com }
    { userclass=user, sAMAccountName=myusername, email=myusername@example.com }

    In this case, Mattermost may cause username@example.com's account to have its user id changed to a random 37-digit base-36 number

    When this occurs, tracking the problem down is very difficult. The only information in the logs is that the username for several accounts changes to a new random value every hour.

    To make this simpler, Mattermost's logs should indicate when the AD/LDAP system returns duplicate entries for the ID attribute.

    (Mattermost Support suggested I file this as a Feature Request, although it feels like a bug)

    When the AD/LDAP User Filter is too permissive, multiple user objects with the same Email Attribute may be returned. When this happens, and the Username Attribute is not present on the returned value, Mattermost may reset the username of the existing user with the same email address to a random string. This repeats every 60 minutes (or whatever the Synchronization Interval is set to).

    For example, if two LDAP objects are returned:
    { userclass=contact, email=myusername@example.com }
    { userclass=user, sAMAccountName=myusername, email=myusername@example.com }

    In this case, Mattermost may cause username@example.com's account to have its user id changed to a… more

    11 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    0 comments  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

16. Ability to search all content (FOIA)

    Sorry if this is already a feature (I'm a Mattermost noob) but I haven't found a way of doing this yet...

    If we are going to implement this, we WILL need a way to search all content (Public/Private channels, Direct messages and Archived) for legal queries!

    This is a basic requirement of all software we implement within Government!

    Note: I am currently using the Team edition as a trial, so maybe it is a feature in the Enterprise version??

    6 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    0 comments  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

17. direct message

    Improve search/filter during direct message.
    With more than 100 users, it is really tough to find the user for DM through scrolling. Sometimes the user only know the first name and not last name... or worse, can only guess the spelling

    Would be great if we could use

    "mochi"

    to find

    "masashi-mochizuki"

    7 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    1 comment  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

18. Set policy for password history

    A companies security policy often has rules stating that a password may not be reused. To facilitate this many applications have a feature that allows the administrator to state how many passwords the application should remember until a password can be reused. Think, for example, a maximum of 10 password that the application must remember.

    3 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    1 comment  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

19. EE: Legal notice presentation for system, team and channels

    Similar to Custom intro text for systems, teams and channels (https://mattermost.uservoice.com/forums/306457-general/suggestions/18595492-custom-intro-text-for-system-team-and-channels) this EE feature would be to enable the presentation of legal notices, formatted in markdown, by clicking an "I agree" button, instead of a "I do not agree" button (which would deny access to the system, team or channel on which the legal agreement is attached.

    There needs to be a PRINT button to print the agreement, and a DOWNLOAD button to download a copy as a text file (in markdown, which is readable).

    A full text record of the agreement at the time of acceptance should be added to the database so it can pulled in future for audit purposes.

    If a legal agreement is updated for the system, team or channel, there should be an option to present the updated agreement to users to be accepted again.

    All versions of the agreement saved to the system should be recorded along with the author, timestamp and other pertinent data.

    Depending on customer feedback there may be variations of the agreement presentation, such as checkbox that needs to be explicitly checked, or links to externally posted legal terms.

    Similar to Custom intro text for systems, teams and channels (https://mattermost.uservoice.com/forums/306457-general/suggestions/18595492-custom-intro-text-for-system-team-and-channels) this EE feature would be to enable the presentation of legal notices, formatted in markdown, by clicking an "I agree" button, instead of a "I do not agree" button (which would deny access to the system, team or channel on which the legal agreement is attached.

    There needs to be a PRINT button to print the agreement, and a DOWNLOAD button to download a copy as a text file (in markdown, which is readable).

    A full text record of the agreement at the time of acceptance should… more

    1 vote

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    0 comments  ·  Mattermost Enterprise Edition  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

20. Add option to set Avatar size

    Currently the avatar size is around 32px.

    My test users are hoping it could be bigger so as to recognize people easily.

    I did a local test and increasing the size to 50px+ would not affect the layout and is indeed easier to find people.

    3 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    0 comments  ·  Mattermost Enterprise Edition  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close