|
Active directory attributes can be retrieved from the LDAP server using Business Rules. The rules use the the _data.getParameter syntax to populate form controls with the Active Directory information. There are many attributes available in Active Directory. View this website for a partial list. Multi value attributes are also supported. This feature works if you are using an LDAP or LDAP Container Security Manager configuration.
will automatically pull the logged in user's First Name, Last Name, Email from Active Directory. The designer can use built-in methods in a rule to populate controls on a form. For example, the business rule shown fills the respective form fields with the First/Last Names and Email Address of the logged in user.
|
If you want to pull additional information from Active Directory into your form, you must add a context parameter to the <frevvo-home>\tomcat\conf\catalina\localhost\frevvo.xml file. The configuration parameter is "com.frevvo.security.Idap.customAttributes" and the value is a comma separated list of attribute names to be retrieved. Let's use the employee's Middle Initials and Home Phone as an example. The attributes for Middle Initials and Telephone Number are initials and telephoneNumber respectively.
Follow these steps to modify the configuration:
<Parameter name="com.frevvo.security.ldap.customAttributes" value="initials,telephoneNumber," override="false"/> |
5. Save the file after all your changes are made. Restart .
Add the additional lines to the business rule to populate the Middle Initials and Home Phone fields.
if(form.load) { FirstName.value=_data.getParameter('subject.first.name'); MiddleInitials.value=_data.getParameter('subject.initials'); LastName.value=_data.getParameter('subject.last.name'); HomePhone.value=_data.getParameter('subject.telephoneNumber'); EmployeeEmail.value=_data.getParameter('subject.email'); } |
The image shows a simple form using the rule above to pull the Employee's First Name, Middle Initial, Last Name, Home Phone and Email Address from Active Directory on the LDAP server.
Attributes with more than one value are also supported. For example, The carLicense attribute can return multiple licenses. You can write a rule to populate dropdown options with those options. Make sure the carLicense attribute is configured in the frevvo.xml file and of course, there are multiple carLicense attributes,each one containing a different value for the dropdown options,set up for appropriate users on the LDAP server.
<Parameter name="com.frevvo.security.ldap.customAttributes" value="initials,telephoneNumber,carLicense" override="false"/> |
A JSON array string listing multiple car licenses is returned and it can be used in a rule. This rule will populate the options of a dropdown control named carLicense.
carLicense.options=JSON.parse(_data.getParameter('subject.carLicense')); |