Versions Compared

Old Version 86

changes.mady.by.user Former user

Saved on

compared with

New Version Current

changes.mady.by.user Former user

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Section
Column
width0px

It is possible to create user and groups in and use them to control access to the system as well as create Workflows. It is also common that the list of users and groups is maintained externally in systems such as Active Directory or Open LDAP. can leverage your existing users repository and this section explains how to integrate with LDAP systems.

It is assumed that you already went through Live Form's installation instructions and have Live Forms running. LDAP Connectivity is available in the in-house only and not offered as part of our SaaS packages.

Info

Safari browsers later than v5.1.7 running on Windows is no longer supported. Issues were found when using Safari with LDAP - SSO.

Column
width240px

On This Page:

Table of Contents
maxLevel1

Section
Column

It is possible to create user and groups in and use them to control access to the system as well as create Workflows. It is also common that the list of users and groups is maintained externally in systems such as Active Directory or Open LDAP. can leverage your existing users repository and this section explains how to integrate with LDAP systems.

It is assumed that you already went through Live Form's installation instructions and have Live Forms running. LDAP Connectivity is available in the in-house only and not offered as part of our SaaS packages.

Info

Safari browsers later than v5.1.7 running on Windows is no longer supported. Issues were found when using Safari with LDAP - SSO.

Column
width240px

On This Page:

Table of Contents
maxLevel1

Prerequisites

These instructions assume that you have an in-house installation of Live Forms up and running or you have signed up for an LDAP tenant on the cloud server

Warning

Active Directory Customers using LDAP must ensure that frevvo.User, frevvo.TenantAdmin and frevvo.Designer groups are specified on your LDAP/AD server. The group names must be spelled as shown. Upper/lower case may be a factor for Open LDAP systems. 

  • All users requiring access to Live Forms must be assigned to the frevvo.User group. 
  • Tenant admin users must be assigned to the frevvo.User and frevvo.TenantAdmin groups,
  • Designer users must be assigned to the frevvo.User and frevvo.Designer groups.
  • Users with the frevvo.publishers role must be assigned to the frevvo.Publisher and frevvo.User groups on your LDAP/AD Server.
  • Users with the frevvo.ReadOnly role must be assigned to frevvo.ReadOnly and frevvo.User groups on your LDAP/AD Server.

Integrating Live Forms with LDAP

...

info
Code Block
Parameter name="frevvo.internal.baseurl" value="http:// <ip of the m/c where frevvo server is hosted>:<port>" override="false"/>
Upload and Video Control Behavior

If your system is configured for LDAP SSO, the upload and video controls exhibit the following behaviors:

  1. The "uploading...." snake image displays continuously when uploading an image to an upload control in a form, accessed from a space, on a mobile device.
  2. The video control will ask for credentials again in use/design mode if you are using the FireFox browser. In IE9, you will see the message: " The Web-page wants to run the following add-on: 'Windows Media Player' from 'Microsoft Corporation'. What's the risk?" Enter your credentials or run the add-on to proceed.

To workaround this issue, configure IIS

...

 so that it does not require re-authentication for every single request.

Live Forms login page authenticating against LDAP

...

The second problem is in directing tasks to frevvo users if your LDAP user names are mixed case. One solution is to use hidden controls on your forms with rules to convert the case of user names to lower case. The example below shows two text controls on a form, one visible, EmployeeMixedCase, and the other hidden, Employee.

Image Removed

A user types a name (regardless of case) into the EmployeeMixedCase control. The hidden Employee control has a business rule that takes the value of the visible control and converts it to lowercase.

Code Block
Employee.value = EmployeeMixedCase.value.toLowerCase();

The form or workflow routing can then use {Employee} rather than the control that may be mixed caseforms with rules to convert the case of user names to lower case. The example below shows two text controls on a form, one visible, EmployeeMixedCase, and the other hidden, Employee.

Image Added

A user types a name (regardless of case) into the EmployeeMixedCase control. The hidden Employee control has a business rule that takes the value of the visible control and converts it to lowercase.

Code Block
Employee.value = EmployeeMixedCase.value.toLowerCase();

The form or workflow routing can then use {Employee} rather than the control that may be mixed case.

Admin Search for a task locked by a user does not show all LDAP users

Although the user list from the LDAP appears correct, the user does not appear in the admin search for a task locked by a user.

  1.  Verify that your LDAP configuration  is correct.
  2. Check if the MaxPageSize property is set in Active Directory.  Look for "MaxPageSize" on this Microsoft Support Page for reference. The default value is 1000.

Active Directory Sample Configuration

...