Page History
Section | |||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Retrieving Custom Attributes from the LDAP Server
...
Frevvoproduct |
---|
...
Server
When a user is successfully authenticated by the LDAP security manager,
Frevvoproduct |
---|
Last Name
First Name
Email address
Using a business rule, you can populate controls in your form with this information.
There are many attributes available in Active Directory. View this website for for a partial list. Multi Single and multi-value attributes are also supported. This feature works if you are using an LDAP or supported. Active Directory custom attributes can be retrieved for users in a
tenant using the LDAP Security Manager or the LDAP Container Security Manager configuration. Frevvoproduct
...
width | 50% |
---|
...
Configure Retrievable Attributes
Single-value Attributes
will automatically pull the logged in user's First Name, Last Name, Email from Active Directory. The designer can use built-in methods in a rule to populate controls on a form. For example, the business rule shown fills the respective form fields with the First/Last Names and Email Address of the logged in user. Frevvoproduct
...
Column | ||
---|---|---|
| ||
|
You can retrieve additional custom attribute information from the LDAP server using the configuration parameter "com.frevvo.security.ldap.customAttributes" and business rules.
Configure Retrievable Attributes
Single-value Attributes
If you want to pull additional information from Active Directory into your form, you must add a context parameter to the <frevvo-home>\tomcat\conf\catalina\localhost\frevvo.xml file. The configuration parameter is "com.frevvo.security.Idapldap.customAttributes" and the value is a comma separated list of custom attribute names to be retrieved. Let's use the employee's Middle Initials Initial and Home Phone as an example. The attributes for Middle Initials Initial and Telephone Number are initials and telephoneNumber respectively.
...
5. Save the file after all your changes are made. Restart
. Frevvoproduct
Add the additional lines to the business Write a rule to populate the Middle Initials and Home Phone fields.
Code Block |
---|
if(form.load)
{
FirstName.value=_data.getParameter('subject.first.name');
MiddleInitials.value=_data.getParameter('subject.initials');
LastName.value=_data.getParameter('subject.last.name');
HomePhone.value=_data.getParameter('subject.telephoneNumber');
EmployeeEmail.value=_data.getParameter('subject.email');
} |
The image shows a simple form using the rule above to pull the Employee's First Name, Middle Initial, Last Name, Home Phone and Email Address from Active Directory on controls in your form with the firstname, lastname, email address plus the additional attributes specified in the configuration parameter. Notice the initials and the telephone number controls in the image are filled with the user information from the LDAP server.
Multi-
...
value Attributes
Attributes with more than one value are also supported. For example, The carLicense attribute can return multiple licenses. You can write a rule to populate dropdown options with those options. First of all, make the specified car license values. Make sure the carLicense attribute is configured in the frevvo.xml file and of course, there are multiple values carLicense attributes, each one containing a different value for the carLicense attribute dropdown options, set up for appropriate users on the LDAP server.
Code Block |
---|
<Parameter name="com.frevvo.security.ldap.customAttributes" value="initials,telephoneNumber,carLicense" override="false"/> |
A JSON array string listing multiple car licenses is returned from Active Directory.
Code Block |
---|
["QW12-TRT-4334","F255-9215-0096","F255-9215-0095","F255-9215-0094"] |
This rule will populate and it can be used in a
Frevvoproduct |
---|
...