We’ve added a new Shared Password Vault management experience for Team Admins in the Swif web app, backed by the Password Vault shared-accounts APIs.

Location:
Settings → Team → Shared Password Vault

What’s new

1. New “Shared Password Vault” section for Admins

• New Shared Password Vault tab under Settings → Team (web app).

2. Full CRUD for Shared Password Vault (Add / Edit / Delete)

• Add Shared Password Vault

  • Opens an Add Shared Password Vault modal with fields aligned to the browser extension model:

    • Site (e.g. www.test.com, aaa.com, okta.company.com)

    • Username/Email

    • Password/Secret (masked with show/hide toggle)

    • Optional labels/tags

    • Device / device-group scope controls

  • Site validation now accepts regular domains like www.test.com and aaa.com without requiring http:// or https://, matching the existing OktaForm.vue behavior.

  • Required-field validation with clear, inline error messages and disabled submit until valid.

  • On success, the modal closes and the list refreshes without a full page reload.

• Edit Shared Password Vault

  • Edit action from each row opens an Edit Shared Password Vault modal.

  • Fields are pre-filled with current values (site, username/email, labels/tags, devices/device groups).

  • Supports updating all editable fields and persisting via backend APIs.

  • Read-only fields (if any) are shown as non-editable per design.

  • Includes loading state while fetching details and proper error handling.

  • On success, the modal closes and the list updates instantly.

• Delete Shared Password Vault

  • Delete row action shows a confirmation dialog explaining that the shared password and its credentials will be removed.

  • On confirm, the account is deleted and removed from the list without page reload.

  • On error, a toast/banner is shown and the row remains.

3. Device & Device-Group Scoping (Admins control where credentials can be used)

• Device selectors and tooltips are backed by the shared-accounts backend:

  • Only active Desktop and Laptop devices are eligible.

  • Accessories/peripherals and inactive devices are filtered out and cannot be selected or displayed.

• The devices/device-groups column/icon includes a tooltip that:

  • Lists the device names and device group names as returned by the backend.

  • Handles long lists gracefully (scrollable region / “+N more” pattern per design).

  • Shows an appropriate empty message when the account is not yet shared to any devices/device groups.

• The same tooltip behavior is available in both Add and Edit views.

4. Search & list usability improvements

• Search bar on Shared Password Vault allows searching by:

  • Site, and

  • Username/Email.

• Placeholder text has been corrected as part of the MR review.

• Search filters the list without duplicates; clearing search restores the full list.

• Searching does not change device filtering logic (still only active Desktop/Laptop in pickers and tooltips).

Quality, security, and UX details

• Uses standard Swif design system components for forms, inputs, tables, tooltips, modals, and notifications.

• All user-facing strings are wired through the i18n system for localization.

• Accessibility:

  • Full keyboard navigation for tables, forms, modals, and tooltips.

  • Proper focus management when opening/closing modals.

  • ARIA attributes added for dialogs and tooltips per guidelines.

• Admin authorization and feature-flag checks ensure:

  • Shared Password Vault UI is only available to eligible Admins when the feature is enabled.

  • Non-admins or flag-off environments do not see or access this UI (including via deep links).

Learn more

For step-by-step guidance on how to use this feature as an admin, see:
Manage Shared Password Vault.