Product updates
Ideas
Groups
E-learning
Documentation
Events

Community
Search

Replies posted by Vincent Doppenberg

419 Replies

Newest first

Oldest first

Pierius Lycklama A NijeholtApprentice

asked in Questions & Conversations

How to restrict OpenID connect authentication on a client application

Hello @Pierius Lycklama A Nijeholt,OpenID authentication will only succeed for users whose authentication type in IAM is set to External, with the matching OpenID provider:

martijngaasbeekApprentice

asked in Questions & Conversations

Redirect session lost after 4 minutes

Hello @martijngaasbeek,We have made a few changes that will prevent this issue from impacting the user experience.The lifespan of the cookie has been increased to 10 minutes. This will make it quite unlikely that the cookie will expire during normal login flows. We have added a configuration setting called ApplicationRedirectURL, which allows the configuration of a URL to, for example, the Universal GUI. Indicium will use this URL as the default redirect URL when the cookie has expired. The same setting will also cause a button to be shown on the root page of Indicium. Should the user ever end up there, that button will take them back to that URL.You can read about these changes in the release notes here.

MatteoSangiorgiPartner

asked in Questions & Conversations

Scheduled sysytem flow stops running

Hello @MatteoSangiorgi,The StartMode setting only affects what should happen after a shutdown (i.e. should it restart automatically or not). The shutdown itself is configured via the Regular Time Interval setting, which defaults to 29 hours, so it recycles 5 hours later every day.Apart from that, there is also the Idle Time-out setting which determines how long the web application may be idle (not receiving requests) before it is shut down. The default for this is 20 minutes, I believe. Both of these settings must be set to 0 if you want Indicium to never shutdown automatically.However, all of this is separate from your issue that the Application Pool does not restart automatically after a shutdown. Apart from the reasons that have already been mentioned by Erwin, I can think of two more reasons why it might not restart.The first is that the website does not have an HTTP binding. The Application Initialization module depends on your website being reachable on http://localhost/applicati

BlommetjePartner

asked in Questions & Conversations

Pass message to indicium

Hello Blommetje,I would recommend using tsf_send_message, which uses raiserror, but allows you to send translated messages that are managed in the SF.I hope this helps.

Harm HorstmanSuperhero

asked in Questions & Conversations

CORS Errors when using Webservice in external website

Hello Harm,It’s not so much about the disadvantage of CORS, I wouldn’t say that there is anything specifically wrong with CORS. However, it’s important to understand why CORS is necessary, which problem it solves and which problems (with the same cause) it does not solve.All modern browsers adhere to what is known as the Same Origin Policy, which limits how a website is allowed to interact with other web resources. Simply put, it restricts websites from interacting with other websites (‘other’ meaning different domains) for security reasons. This affects requests made by the browser, but also if cookies are allowed to be included in a request, if the website is allowed to be embedded in an iframe, etc. All of these measures prevent common security risks such as Clickjacking and Cross Site Request Forgery.So in short, browsers use SOP to protect users against security risks. Browsers do this by limiting the operating space of websites such that operations which are vulnerable to being a

FreddyThinkwise Local Partner Brasil

OData: OpenApi / Metadata subselectsCompleted

This idea has been implemented in the latest release.

PhilSidekick

asked in Questions & Conversations

Running total

Hello Phil,If you double click the 0,12 cell, it will open a drill down window that shows you the underlying data on which it based the value. Looking at this data and the formula for the cube field, can you see how it might arrive at the 0,12 value?

PhilSidekick

asked in Questions & Conversations

Running total

Hello Phil,Does it work as expected if you define your ‘Procent’ cube field like this?Note: the [Afkeur] and [Productie] strings are references to other cube fields. These references are made by placing the upper camelcase version of the cube field id between square brackets. So afkeur becomes [Afkeur] and my_cube_field becomes [MyCubeField].If so, then your second question should be answered as well as it should automatically recalculate the value when you filter the data set.I hope this helps.

Mark LeunissenSidekick

asked in Questions & Conversations

How to set up the Process flow monitor in universal

Hello Mark,It has come to our attention that one of the prerequisites for the process flow monitor is missing in our documentation. In order for the process flow monitor to work, you will need to turn on the WebSocket Protocol feature of IIS.We will make sure to include this in our documentation very soon.I hope this helps.

Heini VenebergRookie

asked in Questions & Conversations

Unable to claim application

Hello Heini,The claim timeout determines how long a session will claim a spot of the Max. # sessions per account for an application. If a session is active, the claim will be extended when Indicium receives a request after half of the claim timeout has expired. In other words, if the session is idle during the latter half of the claim timeout, the claim will expire and the spot will be freed for a new session.Indicium uses cookies to differentiate new and existing sessions, it could be possible that simultaneous requests erroneously cause the application to be claimed twice. If you can report a ticket and include a .har file, we can investigate this further.

Kasper ReijndersPartner

Add button in Indicium to redirect to the appCompleted

Hello everyone,This idea has been implemented in version 2023.3.11 of Indicium. The release notes can be found here.

Heini VenebergRookie

asked in Questions & Conversations

Unable to claim application

Hello Heini,When your application is configured to allow a maximum of 1 session per account, then every 2nd, 3rd., etc. session will receive the message “Unable to claim application”. Please note that the claim of the first session will not expire until:That session has been logged out explicitly. The session has been idle for longer than the configured claim timeout.The claim timeout can be configured on the application as well and defaults to 15 minutes. So you are most likely seeing this behavior because there is already a session active for the account that you are trying to log in, or the session has not been inactive for long enough.I hope this helps.

Andre te RaaCaptain

asked in Questions & Conversations

Is there an example how to build the HTTP request for an open API request?

Hello @Andre te Raa,A few things come to mind, but I’m going to need some more information in order to help you.First of all, it’s important to know where exactly the issue occurs:Does the request from Indicium1 even reach Indicium2? The status code being 0 indicates that this might not be the case. The network infrastructure (e.g. a firewall or some kind of routing rule) might cause Indicium1 to be unable to reach Indicium2. I would expect an error message in the error log of Indicium1 if this is the case. Can you check the error log and share any errors pertaining to this request? Is the request from Indicium1 rejected by Indicium2 due to a malformed URL or header, missing header or missing authentication? In most of these causes I would expect an error in the error log of Indicium2. I don’t think that this scenario is very likely given that the status code of the request is 0, but it’s worth checking the error log of Indicium2 anyway. Is the request from Indicium1 accepted by Indici

martijngaasbeekApprentice

asked in Questions & Conversations

email as username

Hello @martijngaasbeek,We haven't changed anything regarding this in Indicium, but I could imagine that this is an unstable situation because users can sign in with their username or their email address and the record that happens to be returned first is the user that will be logged in.With that said, this situation is not supported. We already have indexes that ensure that email addresses are unique and indexes that ensure user id's are unique. However, they should also be unique compared to each other. I would consider it a bug that you were able to set up two users like this.In order to consistently sign in one user or the other, please ensure that there is no conflict between the user id and email address of any two users.I hope this helps.

Harm HorstmanSuperhero

asked in Questions & Conversations

404 Error - Message protocol independent web service

Hello Harm,Is the RDBMS user of that public user also set to public? This field is the actual link between the authenticated user on the request and the user record in the SF.

Harm HorstmanSuperhero

asked in Questions & Conversations

404 Error - Message protocol independent web service

Hello Harm,There is not a lot of information to work with here, so it's difficult to say anything definitive. But the 404 responses could definitely be explained by the proxy. It is very possible that these requests aren't even reaching Indicium and that it is the proxy server that is returning the 404 responses. You can check if the response headers contain Server-Timing, which is a good indicator that the request reached Indicium.You could also check if /iam/iam and/or /iam/sf are accessible to those users which are getting 404 responses. If those URLs do work, then at least Indicium can be reached for sure and the problem is specific to the application or process flow. Since you are testing against the SF, it's possible that the runtime configuration was deactivated or the user was unlinked from the runtime configuration. Or perhaps the ID of the runtime configuration changed if you're not using an alias. In general it's a much better idea to do tests like these against IAM instead

Gabriela AndesRookie

asked in Questions & Conversations

Using generated session variables for generating guid

Hello Gabriella,All of your guid session variables are the same because you are testing against an SF metasource instead of an IAM metasource. Indicium sets the guid session variable with the value of the use log session, as can be read here. For SF metasources, the use log session is always 1, because the SF does not track user sessions. So the resulting guid will always be 00000001-0000-0000-0000-000000000000 as well. You will get different guids per user and per user session if you test against IAM.The guids for IAM metasources will always be xxxxxxxx-0000-0000-0000-000000000000, where xxxxxxxx is the hexadecimal representation of the use_log_session_id of that session.select *from use_log_sessionSo these guids are both predictable and easily derivable from data that is persistently stored in IAM, and therefore not suitable for the purpose mentioned in your previous topic.

Heini VenebergRookie

asked in Questions & Conversations

Thinkwise login overruled by caching information of other tabpage (e.g. firefox browser)

Hello Heini,There will be some exceptions. Microsoft and Google notably support having multiple accounts signed in at the same time and allow you to choose which one to use upon signing in. So perhaps it was a bit too bold of me to state that nearly all web applications behave like this. However, while these are notable cases, I will stand by my point that it is more common that you cannot sign in with multiple accounts in a single browser profile.When you try doing this on LinkedIn for example, logging in on a second tab page will override the login on the first tab page. This is slightly different from how we do it (we preserve the original session) but the end result is the same, you cannot have two sessions active on two tab pages.When you try doing this on GitHub, after logging in on the first tab page, as soon as you activate the second tab page it will tell you that you have already signed in on another tab or window and ask you to reload the page. If you ignore this message and

Heini VenebergRookie

asked in Questions & Conversations

Thinkwise login overruled by caching information of other tabpage (e.g. firefox browser)

Hello Heini,This is expected behavior and this is how it works for most, if not nearly all, web applications.The way that you have written down the steps does make it seem a bit confusing, but this is because you have opened the login page in both tab pages before logging in. Normally, if you would log in on tab page 1 and then open tab page 2 and navigate to the Universal GUI, it will log you in automatically. In your situation, if you would refresh tab page 2 after logging in on tab page 1, you would also be logged in immediately.The reason for this behavior is authentication cookies and as I said before, this is how nearly all web application operate. This behavior is actually a requirement for Single Sign On to work at all.If you want to log different users in at the same time, then there are two things you can do:Use a different browser for each user. Use a normal window and an incognito/inprivate window. Please note though that multiple incognito/inprivate windows do share cookie

Gabriela AndesRookie

asked in Questions & Conversations

SESSION_CONTEXT(N'guid') to be used globally.

@FreddyThis would require storing the encryption key in IAM, which is something that I would not recommend doing. Furthermore, this solution risks data loss as well, because it would require the key to constantly be deleted and recreated.@Gabriela AndesI understand what you are trying to achieve, but there is currently no secure way to do this. The SESSION_CONTEXT is not ideal for this purpose because it is cleared after every database command. It is important to be aware that Indicium uses connection pooling and that database connections are shared and reused by multiple users throughout their lifetime. There is no real concept of a ‘user session’ at the database level. It is for this reason that the SESSION_CONTEXT needs to be reset between commands. Freddy is correct that, at this moment, the only way to persist values in the SESSION_CONTEXT is to have the platform set these values and the only way to do this is through extended properties in IAM. However this is arguably less secur

Gabriela AndesRookie

asked in Questions & Conversations

SESSION_CONTEXT(N'guid') to be used globally.

Hello Gabriella,I would strongly recommend against attempting to implement your own encryption/decryption mechanism and especially one that uses a GUID, which is not intended to be cryptographically strong per se, as the password. The only technical requirement imposed on the guid session variable is uniqueness, but it is no stronger than an identity value.For encrypting and decrypting, I would recommend using our Encrypt and Decrypt connectors. For limiting availability of data to specific users, I would recommend using Data authorization prefilters based on tsf_user(). For limiting availability of data to specific session, I would recommend adding an additional data authorization prefilter on session_context(n'guid').With this solution, the encryption itself will not be specific to any user or session, but that doesn’t need to be a problem if the encrypted value can only be accessed by that user/session in the first place. What’s important is that the data is encrypted at rest and in

Tejo van de BorCaptain

asked in Questions & Conversations

Check the progress of a systemflow

Hello @Tejo van de Bor,I think you can get pretty close to your desired situation with the following steps:Don't use waitfor delay in the process flow, as this will indeed freeze the application. The process flow should simply finish after inserting the record in the queue table. In fact, you might not even need a process flow at all, but that depends on what else this process flow does right now. Use the Change detection feature to automatically refresh the table when the table data has changed. You can use a context procedure to disable the task, but this would require the task to refresh the subject as well, even though the system flow will not have finished yet. Furthermore, this will only disable the task for that user in that GUI. If someone else already had the subject opened in their GUI, they would still be able to run the task. I think it would be smart to have the task itself check if it is allowed to run again (perhaps based on the parameter values) and if not, send an info

Alban_TCaptain

asked in Questions & Conversations

Multiple process flows for a single table task

Hello Alban_T,You can call a task from a subflow, but you will have to use the Execute system task process action. Note that with this process action, the task parameters can only be entered using input parameters, default logic will not be available for system tasks.I hope this helps.

martijngaasbeekApprentice

asked in Questions & Conversations

Redirect session lost after 4 minutes

Hello martijngaasbeek,We have put this on our backlog and we will be looking into a few different approaches to solve this issue, as well as the related issues that you've linked. Our primary goal is to prevent Indicium from ever losing the redirect URL, but we will also consider something like a home URL which can be configured in the appsettings, which can serve as the default redirect URL and be displayed as a button.I will keep you updated in this topic.

BlommetjePartner

asked in Questions & Conversations

Import/export xls un Universal gui

Hello Blommetje,I could speculate some more, but it is probably best to open a ticket for this issue in TCP. When opening the ticket, please link this Community topic in the description and upload a .har file containing the import requests to the attachments of the ticket. Our docs explain how to create a .har file here.It could also be useful to upload the exported .xls file to the ticket. If the file does not contain sensitive information, please upload it as is. If it does contain sensitive information, you could remove all but a few rows from the file and anonymize the remaining data. If this is too much work, we can try figuring out the problem using just the .har file as well.

1
2
3
4
5
...
17

Page 2 / 17

Badges

Sanne Buitelaarhas earned the badge Geek
André Heijmerikshas earned the badge Preparator
Yarahas earned the badge Geek
Robbert van Tongerenhas earned the badge Firestarter
HJ van Dalfsenhas earned the badge Transcriber

Show all badges

Powered by Gainsight

Terms & Conditions Cookie settings

Sign up

Already have an account? Login

Login

Login to the Thinkwise Software Community

Login

Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.

Username or e-mail

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK