New in Reemo¶

Discover the latest improvements and new capabilities added to Reemo. This page highlights the most impactful changes for end-users and administrators.

Identity & Access Management

SAML group and role mapping within groups
SAML mapping has been extended to allow automatic assignment of groups as well as roles within those groups, based on the attributes provided by the identity provider.
This enables finer-grained access control fully aligned with the enterprise directory.

Hide SSO mapping when no connector is configured

The SSO mapping configuration interface is now automatically hidden when no SSO connector (SAML, LDAP, etc.) is configured, simplifying the interface and avoiding confusion.

Allow organization administrators to invite users from other organizations

A new setting allows organization administrators to invite users belonging to other organizations, making cross-organization collaboration easier.

Restrict container profile creation for group administrators

A new organization-level setting allows preventing group administrators from creating container profiles, strengthening centralized control.

Portals & Customization

Customize portal theme color

Portals can now be customized with a dedicated theme color, allowing better alignment with each portal’s visual identity.

Disable admin area per portal

It is now possible to completely disable access to the administration interface for a given portal, ensuring strict separation of use cases.

Filter user resources by portal

The resources displayed to a user can now be filtered based on the portal being used, ensuring clear separation between environments and use cases.

Disable PWA banner

An option is now available to disable the PWA installation banner, providing a cleaner user experience when needed.

Container & Infrastructure Management

Limit the number of simultaneous containers within a Collection

It is now possible to define a maximum number of concurrently active containers within a Collection, helping to better control resource usage.

Associate container profiles with a WebSocket relay

Container profiles can now be associated with a specific WebSocket relay, providing better control over routing and network flows.

Support multiple WebSocket relays per container provider

A container provider can now be linked to multiple WebSocket relays, improving scalability and fault tolerance.

Select a specific WebSocket relay per container profile

When a provider has multiple relays, it is possible to select one specifically for a container profile.

Tag container providers

Container providers can now be tagged, making them easier to organize, filter, and identify in complex infrastructures.

Duplicate container profiles

Administrators can now duplicate an existing container profile, speeding up the creation of new profiles based on validated configurations.

User Experience & Interface

Web Client update

The Web Client has been updated to improve performance, stability, and the overall user experience.

Harmonized display of user tags

The display of user tags has been harmonized across the profile view and list views, ensuring better readability and a more consistent experience.

Security & Compliance

Content Security Policy (CSP)

A Content Security Policy has been implemented to strengthen protection against XSS attacks and other content injection threats.

Monitoring & Observability

Send logs to Datadog

Reemo can now send its logs to Datadog, making it easier to centralize, analyze, and monitor platform events.

Security & Authentication¶

Passkeys support
Reemo now supports passkeys as a two-factor authentication (2FA) method.
They can be used as an alternative or in addition to other 2FA methods, providing stronger security and a more modern authentication experience.

Multiple Two-Factor Authentication (2FA) methods

Users can now register and use several 2FA methods simultaneously (e.g., TOTP + security key), offering flexibility and improved account security.

Instance-wide 2FA enforcement

Admins can now require all users of an instance to enable 2FA before accessing the service.

Improved email update verification
When changing your email address, a security code is now sent to the new address.
The update is only confirmed once this code is validated, providing better protection against unauthorized changes.

Remote Session Improvements¶

File Transfer

Users can now send and receive files directly during a remote session, making it simpler to share documents or troubleshoot issues.

Multi-signal
Reemo can now operate with multiple signaling services, allowing complete separation between different user portals.
Each portal can use its own dedicated signaling stack, ensuring that agents and portals match correctly in multi-portal deployments.
This enables scenarios such as distinct user and admin portals, where users from each portal can now connect to remote machines through their corresponding signaling service.

Identity & Access Management¶

SAML Connectors available instance-wide
SAML authentication can now be configured at the instance level, not just per organization.
This brings SAML to parity with LDAP and makes SSO deployment more flexible in large environments.

SAML Groups Mapping

Reemo can now automatically assign users to specific groups and roles based on the SAML attributes provided by your identity provider.

Strong password generator

Admins creating or editing users now benefit from a new secure password generator, ensuring consistent, high-entropy credentials.

Organization & Computer Management¶

Collections for computers

You can now group computers into Collections, making it easier to organize large infrastructures.

Automatic Collection fill

Collections can auto-populate based on dynamic criteria, reducing manual work.

Custom organization icons

Organizations can now have personalized icons for easier visual identification.

User Experience Improvements¶

Filter containers by organization or group

End users can now filter the containers available to them based on their organization or group membership, making navigation clearer and faster.

Rich text editor for announcements

Instance admins can now format announcements with rich text, links, lists, and more, making internal communications clearer and more engaging.

Monitoring & Reliability¶

Prometheus health check endpoint

A new Prometheus-compatible health endpoint is available through the portal, making instance monitoring easier and more reliable.

Security Fixes¶

This release includes several security patches and CVE mitigations, ensuring that Reemo remains safe and secure for all users.