ControlUp Platform

New Features

Mandatory Phone Number & OTP Verification for Registrations

To ensure the collection of reliable contact information for every new user, we’ve updated the user registration flow:

• New users must now provide a phone number and verify it using a one-time password (OTP).

• The phone prefix auto-populates based on the user’s geolocation for a smoother onboarding experience.

These changes help ensure accurate user contact details from the start.

User Settings Table Enhancements

We’ve enhanced the User Settings table to provide greater visibility into user access and role assignments.

The following new columns have been added:

• Last Login Method – Shows the method the user last used to log in (e.g., Entra ID OAuth, Google OAuth, SAML, or username/password).

• Last Login Assigned Roles – Shows the roles assigned at the time of their last login (includes roles assigned via manual login, Entra ID, or SSO group-based roles).

• Assigned Roles – Reflects current roles assigned through manual configuration and Entra ID integration.

Tooltips with detailed explanations will be included in the next sprint deployment.
These updates make it easier to track user access and understand the origin of their role assignments at a glance.

New Features

• The following logs from ControlUp for Desktops (Edge DX) are now recorded in the DEX Platform audit log. This update makes it easier to audit your environment now that more logs are recorded in the central DEX Platform audit log. Learn more.

New Features

• Entra ID integration - You can now integrate ControlUp with Entra ID for authentication and authorization. The new integration lets you assign IdP user groups to ControlUp roles so you can manage ControlUp users directly from your IdP. After setting up the integration, you can automatically configure SAML SSO for Entra ID with just one click.

• TV mode permission - Users with this permission ignore the session timeout duration and are never signed out due to inactivity. This can be useful for displaying ControlUp dashboards on TVs for continuous monitoring.

New Features

• Cost Savings Dashboard - Our new Cost Saving Dashboard shows you how much you have saved using ControlUp products. It includes widgets that display savings in costs and time for both VDI & DaaS environments and for Physical Endpoints & Apps. The savings are calculated based on default parameters that can be adjusted for your organization. They cover actions and remediations that have run to save you time and money.Known limitation: While the metrics are collected from both VDI & DaaS and Physical Endpoints & Apps, users without a license for VDI & DaaS are not able to access the dashboard at this time.

• RBAC for accessing individual VDI reports - You can now set permissions for accessing each VDI report independently. All ControlUp users who used to have the permission VDI reports have been automatically granted the new permissions.

• VDI & DaaS Audit Log icon update - Because the Audit Log is now the only feature located within the VDI & DaaS settings, we changed settings icon at the top-right of the page to the audit log icon.

New Features

• Roles and groups in audit log - A user's assigned roles and SAML SSO groups are now recorded in the audit log each time they sign in.

• Default home page in audit log - Changes to the organization's default home page are now recorded in the audit log.

• Roles page is larger - The page to assign permissions to roles now opens larger and takes up more space on the screen to make it easier to configure roles.

• Tooltips for your email and UPN - Added tooltips to your profile information so that you can easily differentiate between your email and UPN. Note that the UPN is shown only if you sign in with SAML.

Fixes

• Fixed an issue displaying VDI & DaaS historical reports for organizations that haven't upgraded to the new data pipeline.

• VDI & DaaS reports have moved - VDI & DaaS historical reports have moved out of the VDI section and now have their own icon on the main sidebar. This allows you to access reports without having to sign in to your VDI & DaaS environment, and they remain accessible even when no ControlUp monitor is available. New permissions for accessing reports are available under the Reports permission category.

• Permissions for accessing sections of the VDI & DaaS web interface - You can now separately control permission for accessing the Overview and Details tabs in the VDI & DaaS web UI. You can set these permissions under the VDI & DaaS category when configuring a role in DEX.

• Default home page - You can now control which section of the DEX platform opens when you sign in by setting the Default Home Page. For example, if you set the default home page to VDI & DaaS, then you will automatically be taken to the VDI & DaaS section when you sign in to the DEX platform.

• Easily invite Real-Time Console or Solve users to the DEX platform - When inviting users to your ControlUp organization in DEX, you can now select to Invite VDI users. A list of all users who have signed into the Real-Time Console or Solve within the last 6 months appears, and you can select users to invite to the DEX platform.

• Test your SAML configuration - Use the new Test button in the SAML settings page to perform a test login through your IdP and confirm that SSO is configured correctly.

• New default user role for VDI & DaaS users - We added a new default user role VDI & DaaS admins which contains permissions only relating to the VDI & DaaS web UI. This role can be useful to assign to users who will be using the DEX platform only to access the VDI & DaaS web UI.

New Features

• Override login methods for specific users - Override the login methods for a user if you don’t want the user to be allowed to sign in with one of the globally allowed login methods. When you override a user’s login methods, you can only remove one of the globally allowed login methods.

• Import and export SAML SSO metadata - To make it easier to set up SAML SSO, you can now export and import metadata between ControlUp and your Identity Provider.

• Set permission scope using device tags - In addition to device groups, you can now also use device tags to scope permissions to certain devices. A permission applies to a device only if the device is in one of the specified device groups or has at least one of the specified tags.

• VDI & DaaS login methods  - You can now select whether to authenticate to the VDI & DaaS web console using LDAP or your email address-based ControlUp account. Note that the new login method is currently available only to Real-Time DX 9.0 beta users.

• IP Restrictions - You can use IP restrictions to limit access to your ControlUp organization based on a user’s public IP address. If you enable IP restrictions, a user can sign in to your organization only if their IP address is on the IP Allow List.

• SSO support for multiple ControlUp organizations - You can now use SSO to access multiple different ControlUp organizations from the same Identity Provider tenant. To do this, edit the Relying Party Trust Identifier field to create a unique identifier for each organization.

• SAML Single Logout (SLO) - To use SLO (if supported by your IdP), copy the new Assertion Logout URL field from the DEX SAML settings page into your IdP.

New Features

• Override login methods for specific users - Override the login methods for a user if you don’t want the user to be allowed to sign in with one of the globally allowed login methods. When you override a user’s login methods, you can only remove one of the globally allowed login methods.

• Import and export SAML SSO metadata - To make it easier to set up SAML SSO, you can now export and import metadata between ControlUp and your Identity Provider.

• Set permission scope using device tags - In addition to device groups, you can now also use device tags to scope permissions to certain devices. A permission applies to a device only if the device is in one of the specified device groups or has at least one of the specified tags.

• VDI & DaaS login methods  - You can now select whether to authenticate to the VDI & DaaS web console using LDAP or your email address-based ControlUp account. Note that the new login method is currently available only to Real-Time DX 9.0 beta users.

• IP Restrictions - You can use IP restrictions to limit access to your ControlUp organization based on a user’s public IP address. If you enable IP restrictions, a user can sign in to your organization only if their IP address is on the IP Allow List.

• SSO support for multiple ControlUp organizations - You can now use SSO to access multiple different ControlUp organizations from the same Identity Provider tenant. To do this, edit the Relying Party Trust Identifier field to create a unique identifier for each organization.

• SAML Single Logout (SLO) - To use SLO (if supported by your IdP), copy the new Assertion Logout URL field from the DEX SAML settings page into your IdP.