Why do mobile and the new login experience not respect subdomains?
I came from last pass a few years ago. I really do miss it.
I’d like to know what I’m doing wrong here.
Because I use this for business, I have maybe 100 URLs with my business domain in them that have different credentials.
For example, I have internal deployment tools, Privileged Access Management Software, IT monitoring tools, firewalls, load balancers, and some of our company SaaS applications. (Technically most of these all use a single directory, but this is a “for example”)
I’ll use the Microsoft contoso.com domain for this example.
deploy.contoso.com
pam.contoso.com
monitor.contoso.com
firewall-euw1a.contoso.com
lb-euw1a.contoso.com
myapp.dev.contoso.com
myapp.staging.contoso.com
myapp.contoso.com
And 195+ more….
Each of these has an entry in 1 password. Each has a unique username/password/URL combo.
The classic login experience with the drop down right in the username / password field on desktop “mostly” works ok. It places the entry that matches the exact URL at the top, even though it still shows every entry for <anything>.contoso.com. But if I'm actually ON monitor.contoso.com, the first entries are any logins that are ACTUALY FOR that exact URL: monitor.contoso.com.
On mobile, it NEVER shows the exact URL match. It just shows <everything>.contoso.com in some order I haven't figured out. Mobile only shows 5 entries without opening the actual app…. So, as you can imagine with like a hundred <something>.contoso.com entries if it’s mostly useless and wildly inconvenient.
What setting did I miss that fixes this? ignoring the actual url can't be “by design” is it? The classic browser experience doesn't have this issue.
In addition, the new unified login popup or whatever it’s called does the exact same thing on desktop. Just pops up with nowhere near the proper username / password for the URL I’m on. I see you are on monitor.contoso.com, want me to autofill your pam.contoso.com credentials? I can also fill deploy.contoso.com credentials or any number of other credentials that are not for the URL you are actually on!! So, this new unified login feature… also useless, unless I can fix it by adjusting settings.
LastPass also did this, but there was a clearly labeled easy to find setting to treat root domains the same or as unique domains.