Manage Tenants

The superuser admin can add new tenants to your  server using the Manage Tenants page.

Image Removed

• Click Image Removed to add a new tenant.
• Click Image Removed to display the Manage Tenant page. You use the links on this page to edit the tenant information and manage the tenant's roles, users, form and control categories, and production forms.
• Click Image Removed to edit the tenant information. This link displays the same page as the Edit Tenant link on the Manage Tenant page.
• Click Image Removed to make a copy of the tenant.
• Click Image Removed to remove the tenant from the server.

Add Tenant

The superuser admin can use the Tenant page to add a new  tenant. We recommend using lower case for the tenant name as the tenant name becomes part of your user's login names which are case sensitive.

To display the Tenant page, 

...

Image Removed

Here is a brief explanation of the fields:

...

Are you creating a tenant for Confluence? - Check this if you are planning on integrating with Confluence. If checked, the Security Manager Class field displays the Delegating Security Manager. This is the Security Manager needed for Confluence. If unchecked, the Default Security Manager will be used. 

If you are not using Confluence, select a Security Manager Option from the following choices: 

...

...

Manage Tenants

The superuser admin can add new tenants to your  server using the Manage Tenants page.

Image Added

• Click Image Added to add a new tenant.
• Click Image Added to display the Manage Tenant page. You use the links on this page to edit the tenant information and manage the tenant's roles, users, form and control categories, and production forms.
• Click Image Added to edit the tenant information. This link displays the same page as the Edit Tenant link on the Manage Tenant page.
• Click Image Added to make a copy of the tenant.
• Click Image Added to remove the tenant from the server.

Add Tenant

The superuser admin can use the Tenant page to add a new  tenant. We recommend using lower case for the tenant name as the tenant name becomes part of your user's login names which are case sensitive.

To display the Tenant page, 

• Login as the superuser admin. Enter admin@d as the userID and admin as the password. Click Manage Tenants. 
  
  Image Added
  
  
• Click Image Added the plus icon to add a new tenant. 
• Fill in the fields with the information for your new tenant.
• Click the Submit button to save.

Image Added

Here is a brief explanation of the fields:

• Are you creating a tenant for Confluence? - Check this if you are planning on integrating with Confluence. If checked, the Security Manager Class field displays the Delegating Security Manager. This is the Security Manager needed for Confluence. If unchecked, the Default Security Manager will be used. 

• If you are not using Confluence, select a Security Manager Option from the following choices: 

  Section

  Column Image Added Column Frevvo Default Security Manager (FSM) -  is responsible for authentication/authorization and managing users/roles. This is the default option. Your tenant will be created with this security manager if no other choice is selected.  LDAP Active Directory Security Manager (LDAPSM) - The user is authenticated outside . Typically, SSO or  performs the authentication using LDAP directly. SAML Security Manager - This security manager allows the  exchange of authentication and authorization data between an identity provider of your choice (ex:Shiboleth) and a service provider (frevvo). SSO is supported. Although this security manager can be used on-premise it is primarily meant for cloud tenants who use LDAP but do not want to expose it over the internet. DB Container Security Manager (DBCSM) - Authentication is the container's responsibility, but  provides a database interface to fetch users/roles for design time functionality from an external database.    LDAP Container Security Manager (LDAPCSM) - This is exactly the same as the DB Container Security Manager using LDAP/Active Directory instead of a database. Authentication is the container's responsibility.  Custom - (CSM) - Container managed security manager used when there is a requirement for a container to handle authentication.

...

Configuring the LDAP/Active Directory Security Manager

The connection to your LDAP server is configured at the tenant level. Existing in-house customers using LDAP should refer to the  Upgrade Guide for a quick way to import your current LDAP configuration parameters before migrating. in-house customers can add an LDAP tenant and configure the LDAP paramaters via the Add Tenant screen. LDAP properties can be updated at anytime via the Edit Tenant screen.

Info
If you are a new in-house LDAP customer, use the Add Tenant screen to configure the LDAP tenant. If you are an existing LDAP customer, the  migration process copies any existing LDAP configuration from the frevvo.xml or config properties files to the tenant. Once migrated,  updating frevvo.xml has no effect on the tenant configuration. Make changes using the Edit Tenant screen.

Cloud customers must request an LDAP tenant from frevvo customer support. Cloud customers will receive a default tenant login from frevvo and then they can edit the LDAP configuration properties using the Edit Tenant screen to connect to their LDAP server.

In all cases, follow these steps to configure LDAP:

Key Information to Collect

Before configuring the LDAP/Active Directory Security Manager, you will need the following information:

• LDAP server name or ip
• LDAP server port
• User name and password with proper permissions to access and browse LDAP.
• LDAP groups and/or users that will be considered  designers. These users will be able to create forms and flows in frevvo.
• LDAP groups and /or users that will be considered  designers. These users will be able to create forms and flows in frevvo. administrators.
• LDAP groups and users that will be considered  publishers. This role gives a user the permission to go to the home page of every other tenant user. 
• LDAP groups and users that will be considered  administrators.
• LDAP groups and users that will be considered  publishers. This role gives a user the permission to go to the home page of every other tenant user. 
• LDAP groups and users that will be considered ReadOnly. 

Configuration Steps

These instructions assume that you have an in-house installation of Live Forms up and running or you have signed up for an LDAP tenant on the cloud server.

Log into your LDAP Server and add a new group, frevvo.TenantAdmin (case sensitive)

Assign the frevvo.TenantAdmin group to one or more users to give them the privileges of a tenant admin. 

Note
There are four special roles in : frevvo.TenantAdmin, frevvo.Designer, frevvo.Publisher, frevvo.ReadOnly, that must be specified on your LDAP/AD Server if you have users that will be assigned these roles. The group names must be frevvo.TenantAdmin, frevvo.Designer, frevvo.Publisher, frevvo.ReadOnly . Upper/lower case may be a factor for Open LDAP systems.

In-house customers:

Login to  as an  administrator (user:admin and password:admin if you have not changed it)

Click on Manage and then Manage Tenants

You will see a page where the current tenants are listed. If this is a new installation you will only see the default tenant d

Click on the Image Removed plus icon to add a new tenant.

Configure the new tenant: Choose LDAP/Active Directory Security Manager.from the Security Manager Class drop down.
Image Removed
Enter your LDAP Configuration Properties. Alternatively, you can start off from one of the sample configurations and provide only the key information listed above. See below for information on the TLS checkbox

• considered ReadOnly. 

Configuration Steps

These instructions assume that you have an in-house installation of Live Forms up and running or you have signed up for an LDAP tenant on the cloud server.

1. Log into your LDAP Server and add a new group, frevvo.TenantAdmin (case sensitive)
   

2. Assign the frevvo.TenantAdmin group to one or more users to give them the privileges of a tenant admin. 

   Note
   There are four special roles in : frevvo.TenantAdmin, frevvo.Designer, frevvo.Publisher, frevvo.ReadOnly, that must be specified on your LDAP/AD Server if you have users that will be assigned these roles. The group names must be frevvo.TenantAdmin, frevvo.Designer, frevvo.Publisher, frevvo.ReadOnly . Upper/lower case may be a factor for Open LDAP systems.

3. In-house customers:
   1. Login to  as an  administrator (user:admin and password:admin if you have not changed it)
   2. Click on Manage and then Manage Tenants
   3. You will see a page where the current tenants are listed. If this is a new installation you will only see the default tenant d
   4. Click on the Image Added plus icon to add a new tenant.
   5. Configure the new tenant:
      1.  Choose LDAP/Active Directory Security Manager.from the Security Manager Class drop down.
         
         Image Added
         
         

      2. Enter your LDAP Configuration Properties. Alternatively, you can start off from one of the sample configurations and provide only the key information listed above. See below for information on the TLS checkbox.

         Note

         The Name/value table highlighted in the image allows you to configure up to 10 additional LDAP properties. See this website for a complete list of all available LDAP properties. For example, you can configure to ignore or follow referrals. Setting the java.naming.referral property to a value of "ignore" in the Name/Value table configures to ignore treferrals. Consult your LDAP Administrator for the details.You will have to set the ‘java.naming.referral’ property to value ‘ignore’ in the Name/Value table of your Edit Tenant page.

      3. Enter a tenant id, a tenant name and description.
      4. The Max Concurrent Users is the maximum allowed by your license or less.
      5. Specify the LDAP User ID that will have the tenant admin permission. 
      6. Click Submit. You will see your new tenant in the tenant list if the connection to your LDAP server is successful.
         
         
4. Cloud customers:

1. 1. Contact frevvo to create an LDAP/Active Directory tenant. Login with the id and password information provided by frevvo.
   2. Click on the Edit tenant link
      
   3. Edit the LDAP Configuration Properties. Replace the default values with values for your LDAP server.
   4. Click Submit. 

 

Warning
It is recommended that you check the Ignore Case checkbox when configuring LDAP. Refer to Mixed or Upper case User Names topic for more details.

 

Clicking the submit button tests the connection. Any errors are displayed at the top of the form. Here is an example of an error when there is a typo in the LDAP server name:

 

Here is another example if the connection password is incorrect:

...

Finally you need to install your signed or self-signed certificate. You can import the certificate into a keystore that  can access and trust. Follow the instructions for your keystore. If  is installed in a tomcat server, the tomcat keystore can be used. See the instructions for tomcat hereRefer to this Apache Tomcat website for instructions .

External SASL and pooling are currently not supported. This is planned for a later release. 

...

cn=admin,dc=test,dc=frevvo,dc=com

...

Several additional steps are required to complete the LDAPCSM configuration. Return to Configuring the LDAP Container Security Manager for further instructions. \

Configuring the SAML Security Manager

To successfully create a tenant using the SAML Security manager.You , you will need the following:

• metadata file
• The metadata for your Identity Provider
• Attribute mapping information  

...

1. Log onto as the superuser (on-premise) or the tenant admin (cloud).
2. Access the Add Tenant (on-premise) or Edit Tenant (cloud) screen.
3. Select SAML Security Manager from the Security Manager Class dropdown.
4. Copy the Service Provider (frevvo) metadata into the Service Provider field. The xml should be pasted without the prolog. For example, the image shows an example of the frevvo metadata file before pasting:
   
5. Retrieve the metadata for your Identity Provider. For example, for the Shiboleth product the metadata is located in the idp-metadata file.
6. Paste the IDP metadata into the Identity Provider field. This metadata should also be pasted without the prolog.
   
7. Check the Ignore Case checkbox if you are using LDAP for authentication and you want to ignore the case stored in LDAP systems for users/roles. Refer to the Mixed or Upper case User Names topic for more information.
8. Map the attributes configured in your Identity Provider by entering the name for each attribute in the corresponding field on the screen. Be sure to provide the attribute name - not the friendly name. Here is an example of For example, if you are using Shibboleth for your Identity Provider the attribute information is located in the attribute-resolver.xml file in a Shibboleth IDP implementation.

...

1. . The image shows the section of the file where the attributes are defined.
   Image Modified
   The image below shows the attribute mapping on the screen with the

...

1. attribute names from the Shibboleth file:
   

...

1. Image Added

1. Custom attributes can
be retrieved from your Identity provider
2. be mapped by typing the attribute names in the Custom field separated by a comma.
Refer to this topic which discusses an example that pulls additional attributes from Active Directory into a form using business rules. 
4. Click Submit. 
5. Return here to see how to login to your SAML tenant to Logging into LiveForms in a SAMLTenant for login instructions.

Edit Tenant

A tenant admin or a superuser admin can use the Tenant page to configure or edit information about a tenant. 

...

Note that you cannot change the Tenant Id, although you can change the Name and Description. Tenants using the Default

The following Security Manager changes can be changed to the following Security Managers made by clicking the Change button and making a selection from the dropdown,. Cloud customers should contact sales@frevvo.com to initiate the procedure.

• Default Security Manager → LDAP
• Default Security Manager → SAML
• LDAP → SAML

...

If you are editing a tenant using the LDAP/Active Directory Security Manager or the LDAP Container Security Manager configured LDAP properties will display. These properties  can be modified using this screen.

Image RemovedImage Added

If you are editing a tenant using the SAML Secuirty Manager, configured metadata and attribute mappings will display. These values can be modified using this screen.

...

The email address entered in this section is used as the from email address for email notifications and doc action emails for forms and workflows in the tenant.  If you want to setup the email address with a user friendly name, enter the text in the Display Name field. You can specify a different from email address for Document Action and Activity Document action emails by entering a valid email address in the from field in both wizards. The values in these fields overrides the address entered on the Edit Tenant screen.

...

1. Click the Manage Roles link.
2. You will see several pre-created roles: frevvo.Designer, frevvo.Editor, frevvo.Publisher, frevvo.ReadOnly.
3. Click the icon, fill in the form and submit it to create new roles e.g. Employee or Manager.
4. Click the Back to Manage Tenant link.
5. Next click the Manage Users link.
6. For  In-house you will see a single user – the administrative user you defined when you created the tenant. Note that you will have to click the link to display All users. By default, only users beginning with the later A are displayed. For  Onlne you will see two users – the administrative user and the designer username you specified when you signed up for your trial SaaS account.
7. To create a new user with permissions to create forms, click the  icon, fill in the form and select the role frevvo.designer. If you do not select this role then this new user will not be able to create forms but will only be able to use forms created by others.
8. The new user will be created. Create as many users and assign them roles as needed.
9. Logout of the tenant admin account and login as one of the newly created users with the frevvo.Designer role and start building forms and workflows.
10. Note that you must login using either the syntax: userid@tenant for the user name. For example, if the newly created tenant was named example.com then all users in that tenant must login using the ID: user@example.com. If you prefer to enter the username and tenant name in their own login page input fields, the configuration parameter, frevvo.login.show.tenant, can be modified to display the tenant name input field.  

...