TL;DR: is there an extended property for user application authorization? My development environment and my user application database are seperated by a VPN and distinct active domains, with no username overlap. While developing, I am not running the user application via IAM but directly against the model in the SF. I have restricted access to the user application database, I have no say in the domain user names, or which to use. This precludes windows domain authentication when starting the user application. My work-around is to add an RDBMS-login to my SF database for a corresponding RDBMS-login on the other end. Is that the only way? I can not find an [url=https://office.thinkwisesoftware.com/docs/docs/sf/extended_properties.html#docsNav]extended property [/url]that tells to give a second login pop-up or that allows to define a static user/password combination for the user application.
Hello, I have a post request configured like this in SF:Post configured in SFThe json process variable has the domain NVARCHAR_MAX and I have set it as expression like this :I am getting this error : "output_msg": "{\"type\":\"https://tools.ietf.org/html/rfc7231#section-6.5.1\",\"title\":\"One or more validation errors occurred.\",\"status\":400,\"traceId\":\"00-648ea2cae71b699ed4c7d5b1a2a39c03-bbb250a5817874a4-00\",\"errors\":{\"json\":[\"The json field is required.\"]}}".The indicium gets : 400 bad request. What I am missing or doing wrong?
I tried everything to get Indicium running, only to activate the automatic Licence update serviceAny more suggestion on how to solve this?Installation details:Indicium 2021.1.16SF 2021,1ASP.NET Core 5.0 Runtime (v5.0.5)appsetting.json:{ "Logging": { "ApplicationInsights": { "LogLevel": { "Default": "Information", "System": "Information", "Microsoft": "Warning", "Indicium": "Debug" } }, "IncludeScopes": false, "LogLevel": { "Default": "Information", "System": "Information", "Microsoft": "Warning", "Indicium": "Debug" } }, "MetaSourceConnection": { "Server": "XXXXXXXXXX\\SQL2019_TEST", "Database": "TW_IAM_XXXXX_2021_1", "PoolUserName": "tsf_admin", "PoolPassword": "XXXXXX" }}Error log, when running Indicium .exeUnhandled Exception: System.Exception: Invalid configuration. Server and Database are mandatory at Indicium.Startup..ctor(IHostingEnvironment env, IConfiguration configuration, ILoggerFactor
Hi,we plan to automate our DTAP deployment via Powershell in the future. For this, we need to authorise ourselves against Indicium. Normally, this is done by forwarding to the login page. However, since the process is to run without user interaction, we would actually have to pass the required credentials via the Authorize call.Unfortunately, I could not find an example for this in the documentation. Can someone explain to me how best to implement such a scenario?
Is there any documentation available explaining how to upload files via Indicium (rel. 2021.1.10).In Fidler I see that a different mechanism is now used, which uses the content-Type: application / octet-stream.How can I get that done from an external application?
When calling a specific task in our Universal web GUI, a dialogue appears containing a form, in which I can change and enter the form values required to execute said task.This specific task contains a dropdown select-element, as well as some regular text fields and a few check boxes. Below is one such dialogue:2 checkboxes, an autofilled textfield, a dropdown and another text fieldWhen I change a value, like (un-)checking one of the checkboxes, I can see in the network inspector of my browser a PATCH request is made on the staged resource.The request body contains only the changed value, and the response returns two booleans indicating whether the layout and/or resource have changed, respectively.When I select an item in the dropdown however, I can see in the inspector a POST request is made to a “choose” endpoint, also on the staged resource. The response of this request is similar to the PATCH request.The request does not contain a body, but the URL looks like below;staged_task(guid_
Hello,Can a subflow be started with a non system flow task ? (My task is located in the Universal GUI)Also if i would place the task in de Win GUI would the subflow still be executed by Indicium?
When accessing the Universal GUI from the web browser, Windows authentication is first requested. Only after ignoring (canceling) this pop-up will you arrive at the login screen.How can we get rid of the first pop-up?
In Indicium Universal, executing seems to contain 2 steps;A staging step, in which a task's default and layout procedures are called, and the context of the parent subject is checked to see whether the user is authorized to execute the task.The URL for this task looks as such:http://<server>/indicium/(iam|sf)/<app_alias>/subject(id=1,idtwo=2,idthree=3)/task_execute_task/stageThe response of this request contains a Location header, in which a URL to the staged task is supplied with a GUID.Step 2, which is the actual execution of the task, is much simpler; we simply make a POST request to http:///indicium/(iam/sf)//staged_execute_task()/commit, which will execute the task on the resource specified when staging the task (subject with id 1, idtwo 2 and idthree 3) and returns a response. We implemented this in our external API based on what happens in the Universal GUI, where we had previously implemented Indicium Basic. However, we noticed a pretty severe downgrade in performan
I'm trying to convert a XML document with binary data to a zip-file via a self developed .NET Core 2.1 Web API using a process flow with a http connector. It's a follow up on this topic: [url=https://community.thinkwisesoftware.com/deployment-12/moving-to-azure-sql-database-azure-file-storage-713#post2018]https://community.thinkwisesoftware.com/deployment-12/moving-to-azure-sql-database-azure-file-storage-713#post2018[/url] When testing the POST call via Postman and a simple .NET console application I receive the result as expected. When using the process flow using a http connector, it returns an error in the SF-Debugger: The remote server returned an error: (411) Length Required. This could indicate the Content-Length header must be applied, so I did: [img]https://uploads-eu-west-1.insided.com/thinkwise-en/attachment/1b54ac17-2d46-4aed-9add-fb03067047bc.png[/img] (Please note this is a fixed length, because the Content is also fixed value for now.) Unfortunately this results in a
Hi, I have used the following guide to create an api call to my Systemflow in Insomnia.This works like a charm, the system flow is working and callable. I am now trying to setup another process-flow that uses a task to start an API call to the system flow, but I am getting the following error: The remote server returned an error: (411) Length Required. I have to admit my knowledge of API's is very limited, I tried to setup the http connector with the same settings as I used in Insomnia. As input for the http_connector i have the following input: https://[server]/indicium/iam/clevrr_test/test_api_system_flow (same URL as the working one in insomnia). Http method is set to: POST. I have tried to use authentication username + password as well, but that does not work. Do I need to send empty content? Is there something Insomnia does, that is not done automatically by the http_connector? What am i missing? Tnx in advance.
I a using the ftp connector with succes so far. At this moment I am trying to connect to a sftp host with the following input: URL: sftp://server8.servers.am-impact.nl:2222/ ftp_con_enable_ssl: ftp_ssl_on I am using the ftp_method_nlist to test the connection. Using this results in a -2 statuscode ( Unsuccessful (invalid URL)). When I change the URL to ftp in stead of sftp I receive a -1 statuscode (Unsuccessful (unknown)). The ftp-statuscode is 0, the description is empty. With the same url and credentials I can log in to the sftp host using FileZilla, so there seems to be no problem on that side of the connection. Does anybody know what could be wrong?
Hello! I am trying to edit an usr_id for an IAM user and the patch request from the http connector fails. I have also tried to call the “task_rename_usr_general” in a process or a task, but it returns an error: “"not_authorized_usr_admin"”. I have to mention that if I want to execute the exact same task manually from IAM, it works, it just fails if I try to call it externally (in a SF process/task or in the SSMS). Do you have any idea what could be the problem or if I should try another approach?
I’m trying to use Azure Managed Identity, because I don’t want to have usernames and password in the appsettings.json on the webapplication server in Azure.Therefor I made a test configuration, but it doesn’t work. Can you help me? The configuration i have is:An IAM database in a SQL Managed Instance (version 2020.1) A WebApp (Indicium) (version 2020.1.6)The instruction from Microsoft which i was following is: https://docs.microsoft.com/nl-nl/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-sqlI made a System assigned identity on my App Service (azzapp-acto-d-nieuw-evo-Indicium-001)I created a contained user on my SQL database (acto_d_nieuw_evo_iam) and gave it all rightsCREATE USER [azzapp-acto-d-nieuw-evo-Indicium-001] FROM EXTERNAL PROVIDER ALTER ROLE [db_owner] ADD MEMBER [azzapp-acto-d-nieuw-evo-Indicium-001] The content of the appsetttings.json is:{ "Logging": { "IncludeScopes": false, "LogLevel": { "Default": "Information", "S
I wanted to reach out and share a problem I've encountered while working with our Azure file storage. We created a task where you can upload a document and preview it. We’re facing an issue with the SAS token not being passed through during the upload process of a document. Although the file path is correct and clearly displayed in the document URL, the upload fails to include the necessary SAS token. Interestingly, when we manually upload the file, it works without any problems.We’re currently investigating this issue and would appreciate any insights or suggestions you may have. Below are some screenshots added to show you some insights. Thank you for your attention and assistance! File storage location in IAM (1)File storage location in IAM (2)After uploading the file, this is the url that is generated. It shows the correct path, but no SAS token to be found. Document url after uploading a document manually, it shows the correct SAS token & path.
Hello, Not realizing that Universal doesn't support Process Flows yet, I created a Process Flow that sent an email to our customer service. Later I understood this was not supported, then I removed the Process Flow and wanted to handle it by SQL Server database mailer using "msdb.dbo.sp_send_dbmail". All I had to do was adjust the task, create SQL Server mail profile and add it in the Stored Procedure via Functionality. The rest of the parameters were already present like body, subject, recipients. I modified 2 tasks which now both give an exception within Universal. Via the Windows GUI/Web it works fine. One task gives the message [Unknown error], but mails. The other task gives the exception [Stage task commit failed. Error: validation_failed] and does not mail. - Application Pool identity has SA rights within the SQL Server instance Does anyone have any idea what might be the reason? Thanks in advance.
I have a list that I would like to sort on a Checkbox column (Datatype = Bit). If I Sort on this Checkbox column by selecting Sort in the Software Factory and give it the Sort order: Ascending, I would expect it to work like that the value 0 comes before the value 1. But what I noticed is that it works the other way round; Ascending works like the checked rows come before the unchecked rows and Descending works like the unchecked rows come before the checked rows. Has this been a conscious decision or does this indeed work the wrong way? [img]https://uploads-eu-west-1.insided.com/thinkwise-en/attachment/1e871d82-01bf-4a18-8bbd-77297859a3e6.png[/img]
Can you tell me how to encode the File data for the FTP connector when using the FTP method 'Upload file (STOR)’?It seems that the connector uses the UFT-16 Little Endian although the source for the data comes from a VARCHAR.
I am developing a system flow. After having an previous error (Procedure or function 'prc_rapport_queue_flow_export_decision_get_record' expects parameter '@send_mail', which was not supplied.) I keep getting the following error when I try to restart the system flow once more with Postman: [ERR] TSFMessagesMiddleware: An unhandled exception occurred while processing the request. (fffadd8a)System.Security.Cryptography.CryptographicException: The key {2bd012cc-a47d-4c33-8209-a3c0fa41639c} was not found in the key ring. 2022-11-02T12:29:53.7410002+01:00 8000008c-0000-f000-b63f-84710c7967bb [ERR] TSFMessagesMiddleware: An unhandled exception occurred while processing the request. (fffadd8a)System.Security.Cryptography.CryptographicException: The key {2bd012cc-a47d-4c33-8209-a3c0fa41639c} was not found in the key ring. For more information go to http://aka.ms/dataprotectionwarning at Microsoft.AspNetCore.DataProtection.KeyManagement.KeyRingBasedDataProtector.UnprotectCore(Byte[] protecte
Is there a specific reason why pre-fliter in Indicium don't work on subject which are marked ‘Offline available’ is true? As soon as ‘Offline available’ is switched off for the subject, the pre-filter is applied.
hi,In a previous topic I described our need to be able to print pdf’s or other documents in our db from the windows client. Since 2022.2 there is a new procesaction Print file (PDF) for this, where you have to set the specific printer in the system flow:We want our users to be able to select which printer to use for specific prints (like pdf’s for printer A, zebra labels for printer B), but this setting is not a fitted for a process variable, it’s fixed. Is there another way to solve this (without creating an application for every user/printer combination)?
Hi, I'm toying with the following. I have an Indicium and Universal GUI. In this universal I open a View, that displays another website. This website is also mine, connects with the same data database, but shows some things that cannot be done in Universal. I have created a URL showsomething.companyname.com and open this in a view (iframe like). This works fine. BUT I do not want this data to be visible by anyone browsing the web. So, I (have) a login on this. Now the end user must login in the Universal gui, and again in the 'iframe’. This is not super user friendly and I think that we must be able to pass the user login cookie to this site as well. If the user is logged in Universal, it shows data. If you browse the site outside of Universal; Access Denied. I have read this topic but we can't get it working. Do we need to place the 'iframe’ in a subfolder in Indicium? Or next to it? It would be very nice if this is possible. Any help in the right direction is very welcome! Thanks!Blo
I'm trying to add data to IAM 2020.2 via an external program*. I try to do this via Indicium. What I can do with the Windows / Web GUI, I can't do with Indicium. I've managed to find out that the following error happens:dbug: Indicium.Controllers.TableController[0] Cannot commit the resource for entity 'gui_appl'. The layout procedure has made the property 'mobile_proxy_address' mandatory, but no value was supplied.This happens when I do a post call (with PostMan i.e.) to https://localhost:5001/iam/iam/gui_applwith the following content:{ "project_id": "my_project", "project_vrs_id": "1.00", "active": "true", "db_name": "my_database", "order_no": 10, "server_id": 2, "max_concurrent_sessions_per_account": 1, "claim_timeout": 1, "gui_appl_alias": "my_database"}It only happens when the application platform "Mobile" is enabled. According to the log message the field mobile_proxy_address is missing. So I've tried to add it, with "", null and '127.0.0.1' as va
Hi,I have an uat environment for a client with a lot of basic data in it. Now we want to export some of this data to the clients uat environment. When I export this table ‘Function’ to an .xls I get 50 something rows. 9 columns. All as expected. The table is pk lookup to company_table (ID) text text status (ACT) (varchar) Checkbox mandatory 1 or 0 price (numeric) Lookup to Tariff group (ID) Internal or External (varchar) Checkbox mandatory 1 or 0 When I export the excel and import it, all rows fail. After some toying I found that removing the first row from the xls with the column names resolves a bit. The rows are imported, but only the columns are set. However, the company lookup is not set. The company name exists, so it should lookup I assume. Also, setting the ID from the company_table as a value does not work. But also the checkboxes are not processed correct. The .xls says ‘True’ , but the import sets 0. When I change the value in a 1, it also does not work. Same for the ot
I'm trying to configure an Azure App Service that uses the OpenID possibility of IAM to authenticate users. The app service is a website with static content and should be protected using an OpenID Connect provider:https://docs.microsoft.com/en-us/azure/app-service/configure-authentication-provider-openid-connectI’ve tried to set this up, but I struggle with both the configuration in Azure and in IAM.When I use the example document from Microsoft documentation (below) from Apple ID it does redirect me to the Apple ID login page, on which I assume should work when correctly set up;{ "platform": { "enabled": true }, "globalValidation": { "redirectToProvider": "apple", "unauthenticatedClientAction": "RedirectToLoginPage" }, "identityProviders": { "openIdConnectProviders": { "apple": { "registration": { "clientId": "com.contoso.example.client", "clientCredential": {
Already have an account? Login
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
