Delinea Secret Server Mobile

Delinea

About this app

Secret Server Mobile provides remote access to secrets from Thycotic Secret Server or Secret Server Cloud


Autofill feature (iOS 12 and up)


Users can use the mobile app to authenticate to a Secret Server instance and access their secrets.


App support for MFA mechanisms used by Secret Server:
• DUO – Push
• DUO – Phone call
• Pin Code


App can support a device’s biometric authentication (Fingerprint and Face ID) instead of a password or other MFA.


Auto-reconnect to Secret Server if connection is temporarily dropped due to network issues.


Support for Secret Server login Refresh token


Ability to view, add, edit, and delete both Secrets and Folders.


Search based on Secret name.


Access Secret from your Favorites list


View “Recent” Secret list to display the 15 most recently accessed Secrets.


Users can access and use their secrets via mobile device, using the built-in password management features. When users are logged in with their account, they can navigate their Secret Server folder structure to access Secrets.


Automatically fill credentials from Secrets into other mobile apps or Web browser sites on the mobile device
• Requires that the Mobile app be registered with the device’s own autofill service
• Use the device’s own autofill service to push Secret credentials into other mobile apps or web browser pages
• Launch web sessions from a Secret on the mobile device and have the credentials auto-populate in the mobile devices default browser


Supports SAML Login (Web Login) or Local user login. Users can switch between Web Login (SAML) or Local user login.


Supports secret access workflows.
• Checkout and DoubleLock: Users can access secrets which use check out and those which require a DoubleLock password.
• Ticket System Support: Allows users to access secrets when a comment and/or ticket number is required.
• Visual Indicators show when a secret has been checked out or when you request access to a secret that has been checked out by another user.


Supports Offline Caching of Secrets
• Select secrets for offline caching, when mobile network, Wi-Fi or connectivity to Secret Server is not available and access secret details on the go.
• Cache individual secrets or an entire folder
• Visual Indicators show when secrets have been cached, have expired in the cache or have been checked out for offline use.
• Store in a secure encrypted database protected by Biometric authentication.
• Offline Access and Time to Live (TTL) are managed centrally via Secret Server

•A new Inbox serves as a central location for all notifications and all inbound and outbound
access requests.
• Users can create a new access request directly from the navigation panel or from the secret's
context menu.
•Users can update or cancel any pending access request for a secret from the requests log.
•Users can send several access requests for a secret, see a list of access requests for a secret,
and see details of an access request.
•Users can now search for secret templates in addition to secrets.

Thycotic Secret Server provides an Onboarding process for users starting the mobile application for the first time.

Privileged Access Management, PAM, Enterprise Password Management, Thycotic, Secret Server Mobile

Ratings and reviews

Not having an app may actually be better. Can't access personal folders, search shows secrets you don't have access to view details of, auto-fill is overly aggressive in areas then fails to populate in others. Overall, really sad a best in class company can't figure out how to make usable applications. Sadly the browser extension is no better.

The latest version of the app seemingly nerfed the ability to cache secrets to my phone, which I used to rely upon pretty heavily. The option is there in the left-hand pull-out pane, but I can't actually cache any secrets to my phone. Autofill is an unreliable mess, too. Delinea, I know you have the gusto to make this all right. Please do so! I don't want to have to migrate to a different platform.

I use Okta to sign in and my organization requires a mobile authenticator for 2FA. This makes signing into the app a monumental inconvenience. I frequently have to sign in twice before entering the PIN, and every time I switch away from Delinea (to verify my 2FA and retrieve my PIN), it has to get my credentials from Okta again before moving on to the next step. I use a screen lock, why doesn't this app cache my login after the first use so I only need to enter my phone PIN or biometric to open?

What's new

- Android 14 support
- Bug fixes