Notes

Web Content Accessibility Guidelines (WCAG) and Versions

Delinea currently uses Web Content Accessibility Guidelines (WCAG) 2.2 levels A and AA to standardize accessibility approaches.

Progress has been made on the following Level A and Level AA criteria since our 11.6 release:

2.4.11 Focus Not Obscured (Minimum) (AA): Improvements to the secret view panel have enhanced copy icon visibility and focus management.
2.5.7 Dragging Movements (AA): Remediation is ongoing. Keyboard-accessible alternatives for drag-to-drop patterns are being implemented.
2.5.8 Target Size (Minimum) (AA): Copy icons and interactive elements have been made more visible in the redesigned secret view panel.
3.2.6 Consistent Help (A): Help resources remain consistently available throughout the application.
3.3.7 Redundant Entry (A): User preferences and settings persist across sessions.
3.3.8 Accessible Authentication (Minimum) (AA): Authentication workflows continue to support accessible methods.

Success Criterion 4.1.1 Parsing has been removed from this report as it was made obsolete in WCAG 2.2. Modern browsers and assistive technologies no longer require this criterion to be evaluated.

Due to the Section 508 Refresh in 2018 for US federal agencies, and other policies from other nations aligned to Web Content Accessibility Guidelines (WCAG), this VPAT uses WCAG 2.2 and includes cross-referencing for Revised Section 508 and EN 301 549. However, Delinea policy is guided by WCAG 2.2 levels A and AA. For clarification on how this corresponds with specific client requirements or agency policies please consult your accessibility professional or team.

For more information on WCAG 2.2 and the different levels, please refer to the official document maintained by the World Wide Web Consortium (W3C): https://www.w3.org/TR/WCAG22/. Whether an application, website, or electronic document supports WCAG at any level does not guarantee accessibility; standards like WCAG are a foundation and common framework between products, services, and providers even though the final test of accessibility is user experience.

Browser Compatibility and Interactions

Secret Server was developed with the Chrome browser in mind. When on MacOS systems using Safari, Secret Server may behave unexpectedly which would impact keyboard interactions and the use of VoiceOver may not be optimized.

Known Issues

These issues affect multiple groups of users and if these issues are addressed, are known to help meet multiple WCAG Success Criteria.

Keyboard Navigation

Drag-to-drop pattern for reordering lists or items continues to be remediated for keyboard-accessible alternatives. This work addresses WCAG 2.2 success criteria 2.5.7 Dragging Movements. Progress includes enhanced keyboard access in the secret view panel introduced in version 11.9

Banner alert behavior has been improved. Screen readers correctly announce alerts, and the left navigation expand/collapse toggle has been properly labeled for screen readers as of version 11.8. Banner alert keyboard navigation order continues to be refined.

Screen Reader Support

Significant screen reader improvements have been made across versions 11.7, 11.8, and 11.9, tested using NVDA with verification via JAWS for Windows. Key improvements include:

Added ARIA labels to the notification bell to support screen readers (11.7)
Discovery runtime summary information is now correctly accessible for screen readers (11.8)
Left navigation expand/collapse toggle correctly labeled for screen readers (11.8)
Enhanced keyboard access in the secret view panel (11.9)

Further ARIA improvements continue to increase usability and compatibility for screen reader users.

Sensory Characteristics

Most instructions do not rely on sensory characteristics of components such as shape, color, size, or visual location. Exception is some references in Help documentation to main navigation menu as "left hand" navigation, to distinguish from global / user account navigation in header. Recommended for change to "application navigation" and "global navigation".

Use of Color

Color is not generally used as the only method to convey information, prompt a response, or distinguish visual elements.

Charts and color coding, such in dashboards, need remediation in several places, however the information conveyed in the charts (such as number of failures) is accessible and presented in text.

Workarounds

Keyboard Navigation

Timing Adjustment

Checkout session time period

Administrator roles can adjust session time periods if necessary for secret checkout; if a checkout expires another checkout can be done.

Password display timeout

As of version 11.8, a non-configurable 30-second timeout has been implemented for password display and clipboard caching for security purposes. This timeout applies to:

Show password functionality: Password display auto-hides after 30 seconds
Copy password functionality: Password value is cached for clipboard operations for 30 seconds only

This security enhancement reduces stale password issues and improves overall security posture. Users requiring additional time to view or copy passwords should utilize the copy-to-clipboard function and paste within the 30-second window.