Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Section
Column
width0px

It is possible to create user and groups in

Frevvoproduct
and use them to control access to the system as well as create workflows. It is also common that the list of users and groups is maintained externally in systems such as Active Directory or Open LDAP.
Frevvoproduct
 can leverage your existing users repository.

 There are two configuration scenarios when integrating

Frevvoproduct
with LDAP
Frevvoproduct
can be configured to integrate with your existing LDAP Active Directory server to authenticate users. There are two configuration options. Each one uses a different Security Manager.

Frevvoproduct
integrates with

The first option is to use the 

Frevvoproduct
LDAP Security Manager. Here the authentication is handed off to an external LDAP/AD system

and is in full control of user authentications. Use the LDAP Security Manager in this situation.
Image Removed
 
Frevvoproduct

.

 Image Added
 

frevvoproduct

The second option is to use the

Frevvoproduct
 LDAP Container Security Manager. Here the 
Frevvoproduct
server
is deployed to an existing servlet container that is already handling user authentications through LDAP. Authentication, in this case, is the responsibility of the container.

However,


is responsible for runtime authorization and design time querying of user metadata. Use the LDAP Container Security Manager in this situation as that reuses the existing LDAP connector but relies on the container for user authentications. 


Image Modified

Column
width240px300px

On This Page:

Table of Contents
maxLevel1

Retrieving Custom Attributes from the LDAP Server

When a user is succesfuly successfully authenticated by the LDAP security manager,

Frevvoproduct
 then retrieves  retrieves the following basic user information from the LDAP server.

LastnameLast Name
FirstnameFirst Name
Email address
You can retrieve additional LDAP user information using the configuration parameter "com.frevvo.security.ldap.customAttributes" and Business Rules.  There address 

Using a business rule, you can populate controls in your form with this information. 

 Image Added

There are many attributes available in Active Directory. View  this website for  for a partial list.  Multi Single and multi-value attributes are also supported. Custom  Active Directory custom attributes can be retrieved for users in a 

Frevvoproduct
 tenant using the LDAP Security Manager or the LDAP Container Security Manager.  

 

...

You can retrieve additional custom attribute information from the LDAP server using the configuration parameter "com.frevvo.security.ldap.customAttributes" and business rules.   

Configure Retrievable Attributes

Single-value Attributes

 

If you want to pull additional information from Active Directory into your form, you must add a context parameter to the <frevvo-home>\tomcat\conf\catalina\localhost\frevvo.xml file. The configuration parameter is "com.frevvo.security.ldap.customAttributes" and the value is a comma separated list of custom attribute names to be retrieved. Let's use the employee's Middle Initials Initial and Home Phone as an example. The attributes for Middle Initials Initial and Telephone Number are initials and telephoneNumber respectively. 

...

     5. Save the file after all your changes are made. Restart 

Frevvoproduct
 

Add the additional lines to the business Write a rule to populate the Middle Initials and Home Phone fields. 

Code Block
if(form.load)
{
FirstName.value=_data.getParameter('subject.first.name');
MiddleInitials.value=_data.getParameter('subject.initials');
LastName.value=_data.getParameter('subject.last.name');
HomePhone.value=_data.getParameter('subject.telephoneNumber');
EmployeeEmail.value=_data.getParameter('subject.email');
}

The image shows a simple form using the rule above to pull the Employee's First Name, Middle Initial, Last Name, Home Phone and Email Address from Active Directory on controls in your form with the firstname, lastname, email address plus the additional attributes specified in the configuration parameter. Notice the initials and the telephone number controls in the image are filled with the user information from the LDAP server.

Multi-

...

value Attributes

Attributes with more than one value are also supported. For example, The carLicense attribute can return multiple licenses. You can write a rule to populate dropdown options with those optionsthe specified car license values. Make sure the carLicense attribute is configured in the frevvo.xml file and of course, there are multiple carLicense attributes, each one containing a different value for the dropdown options, set up for appropriate users on the LDAP server.  

...

A JSON array string listing multiple car licenses is returned and it can be used in a 

Frevvoproduct
 rule. This rule will populate to populate the options of a dropdown control named carLicense.

...