|
Custom attributes can be retrieved for users in a tenant using the LDAP Security Manager or the LDAP Container Security Manager. When a user is successfully authenticated by the LDAP security manager,
then retrieves the following basic user information from the LDAP server:
Lastname
Firstname
Email address
Using a business rule, you can populate controls in your form with this information.
There are many attributes available in Active Directory. View this website for a partial list. Multi value attributes are also supported.
You can retrieve additional custom attribute information from the LDAP server using the configuration parameter "com.frevvo.security.ldap.customAttributes" and Business Rules.
If you want to pull additional information from Active Directory into your form, you must add a context parameter to the <frevvo-home>\tomcat\conf\catalina\localhost\frevvo.xml file. The configuration parameter is "com.frevvo.security.ldap.customAttributes" and the value is a comma separated list of attribute names to be retrieved. Let's use the employee's Middle Initials and Home Phone as an example. The attributes for Middle Initials and Telephone Number are initials and telephoneNumber respectively.
Follow these steps to modify the configuration:
<Parameter name="com.frevvo.security.ldap.customAttributes" value="initials,telephoneNumber," override="false"/> |
5. Save the file after all your changes are made. Restart .
Write a rule to populate controls in your form with the firstname, lastname, email address plus the additional attributes specified in the configuration parameter. Notice the middle initials and the telephone number controls in the image are filled with the user information from the LDAP server.
Multi-valued Attributes
Attributes with more than one value are also supported. For example, The carLicense attribute can return multiple licenses. You can write a rule to populate dropdown options with those options. Make sure the carLicense attribute is configured in the frevvo.xml file and of course, there are multiple carLicense attributes,each one containing a different value for the dropdown options,set up for appropriate users on the LDAP server.
<Parameter name="com.frevvo.security.ldap.customAttributes" value="initials,telephoneNumber,carLicense" override="false"/> |
A JSON array string listing multiple car licenses is returned and it can be used in a rule to populate the options of a dropdown control named carLicense.