Hello @Arie V Idea raised. Indeed I find it strange that this was not there from day one. Not the best approach to rely on users to have the most up to date platform GUI as they are not technical and do not know why they should Update the GUI of the platform. They only know the Application we publish not the Platform. Please everyone vote for it.Thanks
Hi @Vincent Doppenberg , Solution seems suited for us as well. Good that we see it is already being worked on. Thanks Mike
@Anne Buit I gave it a bit more thought and I am wondering if a temporary workaround could be created that might serve our most urgent needs at this stage, as well as those of @Bas and @mperrott: add a Universal GUI config.json parameter that basically causes the Universal GUI to ignore the IAM OpenID setup. Universal GUI 1: This would cause the Universal GUI app with this ignore parameter to simply show it’s own (local) Login screen: suitable for the users who require Local login Universal GUI 2: The second Universal GUI app without the ignore parameter would still redirect to Indicium to show the OpenID login option (with or without the Local login button, based on the IAM setting) @Bas @mperrott could you confirm if this would work for your scenario for the time being? Hi @Arie V ,This would indeed work for us, as we have as you explained above the exact same scenarios.Thanks Mike
Hello @mperrott, This does fix your startup problem, but please note that your reports will not work. I will keep you updated on the status of this issue. Hi @Vincent Doppenberg ,Noted on this, we will not go into this version for our UAT and PROD env yet, until we get a fix for the above issue.
Hello Arie, Yes, this is the same issue. The only difference is that @mperrott appears to have report preloading configured in the appsettings.json, which causes the problem to occur during startup, which crashes Indicium. We are investigating what happened between 2023.1.10 and 2023.1.11 that would explain this issue. Hi @Vincent Doppenberg ,I remove my settings related to Dev Express and now it works: { "name": "Reporting__DevExpress__Preload", "value": "True", "slotSetting": true }, { "name": "Reporting__DevExpress__WorkerCount", "value": "10", "slotSetting": true }, Thank you Please Let me know once the issue is resolved to apply back the configuration for DevExpress.
@mperrott @Vincent Doppenberg we have had this particular error while Indicium was actually running with a few earlier upgrades too. This issue was client-side and the solution back then was to clear the user’s browser cache for the specific Indicium URL (not the Universal GUI cache). Does this work for you? You could also test with Incognito browser. If so, there is something buggy in the latest Indicium. Hi @Arie V ,I have tried it but that does not seem to work. @mperrott, in this case the error will probably appear in your eventlog.xml. You can find startup errors like this by opening Azure Kudu (you can find this in the Azure Portal for your App Service under "Advanced Tools”). There you press "Debug console” and in my case I used “PowerShell”. In the new screen you can see the folder "Logfiles” and there should be an eventlog.xml. If by any change you added an OpenID client recently (I don't know if this is the case, but I've seen this startup error a few times due to this), you
FreshI have cleaned the directory completely. to be empty. Redeployed a fresh Indicium 2023.1.11 using kudu as always Started the server which created the Logs Directory got a new Log file Timestamp is UTC time.Log Content: The Error persists. The Web.config, appsettings.json is not changed and it is using the default coming from Thinkwise .Our configuration is part of the Azure App service configuration and not in appsettings.json.Thank you
Hello mperrot, Since you said that the log file is empty, it sounds like Indicium isn’t even starting, which points to an issue with deployment or system requirements. I have a few questions to pinpoint the issue: Are you using Indicium Universal or Indicium Basic? What was your previous version of Indicium? Are you deploying on premises or in Azure/AWS? Hi @Vincent Doppenberg ,When I say there is nothing in the logs I do not mean it is empty, I mean it just does not have any errors. Indicium seems to have started as normal.2023-01-24T06:36:05.7059825+00:00 [WRN] No persistent storage location for dataprotection is configured. The Encrypt and Decrypt process actions are disabled.See the Thinkwise documentation on how to configure dataprotection. (cecad728)2023-01-24T06:36:07.2369599+00:00 [INF] Initiating startup license check (a070e428)2023-01-24T06:36:07.2938466+00:00 [INF] Reading license from IAM. (d4563d62)2023-01-24T06:36:07.3301829+00:00 [INF] License successfully read fr
Hello,Anyone else has issue upgrading to this version?There is nothing in the log file and for sure there is no new configuration introduced as per above. Our IAM version however is 2022.2 could that be the problem ? isn’t it backwards compatible ?
Idea opened related to the above.
Hi @Vincent Doppenberg ,Thank you so much for the reply and for clarifying my questions. I would tottaly use the provided encryption/decryption from the platform if the 2 process flow actions could very well exist as functions to be used in the sql template of the views. So my case would be like below:Security Concerns & Problems to resolve:Overall DB encryption (Implemented) - protects from Outside threads. IAM User Groups (Implemented) - protects from Un-authorised Users internaly to get sensitive data. Custom Row Based Authorization (Implemented) - Additional level to TW roles/user groups as row based permissions. Certain records are accessed by specific people by means of tagging mechanism. Column based encryption/decryption (related to this question topic) - Required to protect from internal Administrators having access to Database directly.Pre-requisites:A form/grid page displays sensitive data (multiple fields) for which we want to encrypt from people not authorised to view
Hi @Mark Jongeling , @Erik Brink , Additional question:If encryption/decryption is within the process flows as process actions, how can it be used in Views with multiple fields to encrypt/decrypt? Are there available functions for the same ?
Hi @Freddy , Faced similar issue here in Cyprus and we ended up anyways moving our development env to Azure VMs which is on same location as the servers of our delivery env.All located West Europe.Super FAST.We do everything on the remote VM’s and no issues in downloading anymore with this.Good luck.
New→Next release Excellent Hello mperrot, As luck would have it, we have actually just implemented this. It will most likely be released this upcoming Friday (November 11th). @Vincent Doppenberg I had opened it in past in old TCP but lost track of it :) good that it was implemented.
Hi @Jeroen van den Belt , Shouldn’t we keep it open to track the progress of it and based on votes it can be scheduled earlier or later depending on that?
Hi Mark, Erik,I saw the encrypt and decrypt process flow actions and also the options for the storage of the encryption keys. It will help in encrypting based on the key used in my case it will be on Azure and seems my open case the admins will not be able to see the data directly in the database is solved.So I can protect the app with:The overall DB from outside threads by having it encrypted entirely. I can have the above to protect from Admins seeing directly in DB for sensitive data. I can have the related IAM permissions in such a way that only authorised people can see sensitive data.Question:The key and encryption is handled by the IAM so there is no need for User Password or anything like that as I see from the actions themselves right ?Will a simulated authorized user to sensitive data from an admin, Will the Admin have visibility on the sensitive data? or there is a setting that can prevent that?
@mperrott I don’t think so. The comments regarding tooltips in Universal forecast deal with the basic concept of showing the Tooltip from the Translation in the Universal GUI, which could serve as help information for the user to understand the purpose of a field. I believe what @Harm Horstman is requesting is a tooltip on a Lookup column that shows additional columns from the table of the Lookup value. This would be displayed (and clickable for opening in a new Document) on hover over on the Pop-up icon for example. It would be a more slick way to provide additional information on a record to users, without them having to click or open a separate screen. I believe this is very similar to (part of) the Compact Layout concept of Salesforce: When a user hovers over a lookup relationship field on the object record page, a highlights panel for that field also displays the first seven fields from the compact layout. @Harm Horstman am I right in explaining your Idea? Hi @Arie V,Seems to me
Hi Harm,Is this Idea covering the discussion that is related to tooltips in the Universal Forecast comments section?
This looks similar to idea i opened:
Thank you @Anne Buit for the reply,Seems we will need to copy the IAM and create a separate instance for the application to have the SSO with O365 and once all Applications are migrated to Universal GUI we merge IAMs back together.You can ignore my last comment.
Hi Alex,Did you check and save the cookie if any? to be reused with the other requests of the user ?We faced similar issue but was due to cookie not saved on our side to reuse with the authorization token.
Hi Phil,Why not using a process flow that generates the set of reports (group X) and store them in the DB. As a Final step in the process flow have a report that selects the specific requested reports of group X from the table to merge them into 1 in the given order as you have them in the DB or configured sort order.Hope this covers it.https://community.devexpress.com/blogs/reporting/archive/2020/04/22/reporting-merge-pdf-documents-into-your-report-v20-1.aspx
Updated idea statusNew→Needs feedback Hi @Mark Jongeling I already replied and have accepted the fact to merge to the referred one, can you apply the change?Thanks
Hi,After deploying latest HF’s for SF we get the below and cannot synchronize to IAM 2022-06-09T09:36:00.9225343+00:00 [ERR] Error in process procedure of process action 'do_job' in process flow 'system_flow_generate_sync_scripts'. (57b87444)2022-06-09T09:36:00.9370848+00:00 [ERR] Error scheduling system flow 'system_flow_generate_sync_scripts' for application 284. (326083e9)Microsoft.Data.SqlClient.SqlException (0x80131904): Violation of PRIMARY KEY constraint 'hotfix_pk'. Cannot insert duplicate key in object 'dbo.hotfix'. The duplicate key value is (20220603 - Fill reachable object tables upon syncing).The statement has been terminated. at Microsoft.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction) at Microsoft.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj, Boolean callerHasConnectionLock, Boolean asyncClose) at Microsoft.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior,
Hi,I had asked similar question in a support ticket and the answer was:Create users with their email address also as the user_id Set the authentication type to external Create the users on the IAM db whiles using the following command CREATE USER [name@thinkwisesoftware.com] FROM EXTERNAL PROVIDER Is there a different way to integrate similar to Indicium SSO ?
Already have an account? Login
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
