Vault Enforcement is available to organizations with Password Management and Credential Protection that have set up Confidential SSO and Policy deployment. We also recommend setting up Just-in-Time Provisioning to benefit from automated provisioning and onboarding.
Vault Enforcement is a beta feature that lets admins require employees to log in to the Dashlane extension before they can use the login or sign-up form on specific websites. If an employee reaches one of those forms while logged out, Dashlane prompts them to log in first.
Video: Enforce vault login for specific websites
Why use Vault Enforcement
Vault Enforcement adds a rule-based control to the Admin Console. When you add a domain to the enforcement list, Dashlane syncs the rule to every deployed browser extension on your team within about one hour.
Use Vault Enforcement to:
- Protect your most sensitive websites. Require login for websites with sensitive data or privileged access, such as a customer relationship management tool.
- Support a phased rollout. Require login for websites used by specific departments to build adoption one team at a time.
- Drive company-wide adoption. Require login for websites that most or all employees use.
How the login prompt works
When an employee reaches a login or registration form on an enforced website, Dashlane checks whether they're logged in. If they're not, the extension shows a pop-up.
- First visit: the pop-up can be dismissed. The employee can continue without logging in.
- Later visits: the pop-up blocks the page. The employee must log in to Dashlane to continue, and can't dismiss or bypass the prompt.
Set up Vault Enforcement
- Go to Admin Console and select Vault Enforcement.
-
Enter the website you want to enforce and select the plus icon or press enter.
Enforcement covers the website you enter and every website under that domain. For example, login.company.com covers internal.login.company.com, but not company.com or shop.company.com. Enter www.company.com if you want to enforce Dashlane only on www.company.com.
- Save the domain. Dashlane syncs the rule to the deployed extensions within about one hour.
-
Select a domain in the list to view its activity logs, including completed logins and errors.
- Select Remove next to a domain to stop enforcement for that website.
-
Optionally, add your company logo and a support contact to the pop-up, so users know who to reach out to with questions.
Once employees start reaching enforced websites, you'll see the activity in the activity log: rule changes, prompts shown, completed logins, and errors for each domain.
If you have any issues with Vault Enforcement, please contact our Support team.