Thinkwise Platform

Hi,since some months our SQL Job which will sync the AD groups to IAM runs into an error after a certain time.SQL Job:DECLARE @usr_grp_id AS varchar(100) ,@active_directory_grp_name AS varchar(100) ,@active_directory_domain_name AS varchar(1000) ,@net_bios_name AS varchar(15) ,@user_name AS varchar(100) ,@password AS nvarchar(100)SET @user_name = '{DOMAIN SERVICE ACCOUNT}'SET @password = '{DOMAIN SERVICE ACCOUNT PASSWORD}'DECLARE sync_ad_groups CURSOR FAST_FORWARDFORSELECT usr_grp_id ,active_directory_grp_name ,active_directory_domain_name ,net_bios_domain_nameFROM usr_grpWHERE 1 = 1 AND usr_grp_type = 1 AND active_directory_grp_name IS NOT NULLOPEN sync_ad_groupsFETCH NEXTFROM sync_ad_groupsINTO @usr_grp_id ,@active_directory_grp_name ,@active_directory_domain_name ,@net_bios_nameWHILE @@fetch_status <> - 1BEGIN IF @@fetch_status <> - 2 BEGIN EXEC task_import_active_directory_grp @tenant_id = 1 ,@usr_grp_id = @usr_grp_id

Hi, I have a table with companies, the screen type has a grid on the left side and a form on the right side. I also have a task to export these records to a XML file. Since it’s a general export task, it doesn’t make sence to use this task from the form of a selected record. I would like the button to only be available in the task bar in the grid section of the screen. However, if I use a context to hide the task, its hidden in both the form and the grid. Is there a way to only hide the task in the form? (we only use the windows GUI btw) Thanks in advance!Marvin

I created a report with report type DevExpress and use it as a table report. When the report is downloaded the file name is always te same. It looks like the Report Translation is used. Is it possible to add something unique to file name, like the current date and data from a column in the table? 

The filter on the cube view does niet give the expected results. How is this possible? See image below, the filtered results are in the range until - 10.000, however, I see different results. It does not matter if the check ‘apply to specific level’ is on. Could anyone help me with this odd situation? 

In the date helper, there is a task to go tot the current date. This task is working in the GUI. However, the same task in universal is not working. Can someone please guide? GUI image Universal image 

Hi, We are implementing unit tests and want to keep track of our progress. However, we have several unit tests with the unit test type 'Subroutine’. This unit test type is not taken into account in the analysis. How can we keep track of our subroutines (i.e. functions and procedures) in the different cubes? The unit test types: And the code groups show in the cubes:  

This is an Archived topic. The solution is available in the Thinkstore inside the Software Factory.GoalWhen you have system versioned tables in your database, SQL Server logs all changes made to the data in those tables. This solution makes this logging data available for the user. This can look like this: SolutionThe solution in this topic creates views on all system-versioned tables. These views give the user access to the logging data. Also, all of these views get conditional layouts in the Software Factory. These conditional layouts give fields with changed values a color, which makes it easier to analyze the data.Dynamic model meta_view_historyThis code create a view definition for every system versioned table, along with conditional layouts to point out changed data.When you add this code to the dynamic model, you have to change a few values first:@screen_type_id                Your desired screen type: You can keep this null, or change the value.@original_date_column          Na

At a client, we’re going to deploy the universal interface in a short while. While testing the client found an interesting flow concerning login and password recovery that is undesirable.Happy flowIn the universal interface, the user clicks the password recovery link.  The browser is redirected to the indicium interface. The user enters their username/email and a token gets sent out. The user enters the token and new password en hits enter. The user enters a username and password to log in. The user enters their email TOTP token. The user gets redirected to the universal interface.What happened during testing?Somehow the client manually went back to the indicium interface. And started the password recovery there. The process worked the same except he didn't get redirected to the universal interface as no redirect URL was available. They also tried to log in at the indicium interface, the login was successful but the client got stuck as they didn't have an application interface availabl

When opening the Universal GUI login page, DevTools gives a 401 (Unauthorised) error. After logging in with a user with a picture uploaded in IAM the error is shown again.  GET https://office.niverplast.com/indicium/iam/iam/i_ui_usr?$eager=profile_picture401 (Unauthorized)401 - unauthorized. The user is not logged in to Indicium (anymore). Note that the login page will execute i_ui_user before login to validate whether the user has logged in or not. This may cause a 401 error on purpose if not.Once logged in, the profile picture is displayed correctly.Isn't this GET request an attempt to read the IAM profile picture? Isn't it unnecessary that the request is fired at the login screen? 

We have upgraded the SF to 2022.2. During the generation of the project the following error occurs on sql_indexes:The MERGE statement conflicted with the FOREIGN KEY constraint "ref_prog_object_item_prog_object_item_parmtr". The conflict occurred in database "sf_raijmakers", table "dbo.prog_object_item".We were unable to find missing or false keys.We analyzed the generated code which looks like this :/* Create index 'besteld' on table 'inkoop_order_regel'. */if exists (select 1 from sys.fulltext_indexes fx                    join sysobjects ot on ot.id = fx.object_id                    join sysindexes ix on ix.id = ot.id and ix.indid = fx.unique_index_id                    where ot.xtype = 'U'                      and ot.name  = 'inkoop_order_regel'                      and ix.name  = 'besteld')   drop fulltext index on "inkoop_order_regel"goif exists (select 1 from sysindexes ix                    join sysobjects ot on ot.id = ix.id                    where ot.xtype = 'U'             

Is there a ShortKey (e.g. Ctrl+Enter) to go directly to the 'Execute' button in a task from any field?Users wish to complete a task faster, by skipping optional fields, without having to use the mouse. Example:  

Is it possible to change the image on the "forgot password” page and the following pages such as the  "Enter token and new password” page

Hi, I'm trying to create a SAAS project with thinkwise. My request is to store the data of all customers in a single datadase.I did read the Tenants documentation and I think, that I need to create a "Multi-tenant IAM & Multi-tenant product" solution. Is there any documentation of best practices on how to create a Multi-tenant product? Thank you in advance

I am looking for a way to display a percentage in the UI, while the column contains decimal values in the database. E.g. 0.51 in database displays 51 in UI.I expected that the domain control field 'Percentage’ would do the trick, but it doesn't. The documentation is not very specific about what the Percentage control does when it is selected in a domain:I cannot be the first to deal with this issue, hence I hope that somebody here can point me in the right direction.Thanks in advance!

HelloI have an issue with the performance of one of my screens which is opened with a process flow.The main problem is that I want a filter to apply to the open document action before it retrieves all rows.This images might clarify my problem I was wondering if somebody had a solution/workaround which allows me to apply filters to open document actions like this?I think a possible solution in my case is to make a reference to the document I'm trying to open and just present it to the user as a detail screen then the reference columns become my filter in the WHERE condition. But I would rather just open it as a new document.

Is it possible to set focus on  task button 

Hello, I created a task a week ago and today I added a new task parameter, but when I edited the functionality the new parameter didn't show up. How can I make it appear?

Dear all,As per subject I’m trying to setup the SSO on the Universal GUI for part of my users and facing an issue. The documentation mentions the setup of the SSO from Thinkwise perspective which is sufficient, but there is no documentation at least for the setup for Azure/AWS/Google perspective what is actually needed.My Setup:I have a Resource group (RG) called TEST I have a VNET for the RG I have SQL server and App service in the VNET I have a Front Door having the default *.azurefd.net and my custom domain The Front Door points to my App service and redirects traffic correctly. The Indicium and Universal are installed on the App service. The whitelist of client redirect URLs in IAM is my custom domain only.For the SSO:I have done the App registration I have added the new configuration in App Service for the OpenID Microsoft authentication I have added my custom domain on App serviceProblem I face and would like some input is that,The App registration requires that the Redirect URIs

Hello everyone,Because the new Exchange connector that is scheduled for the month November of this year will not give adequate possibilities for our client, we're trying our luck with Microsoft Graph. We created a call and made it fit our needs using Postman.We configured and use all the right credentials (client ID, tenant ID and client secret) for token generation. Actually, we created a call for getting data, and one for patching data. The call types are, of course, get and patch respectively. All calls are successful, and perform as expected, using Postman.Next, we went to our Software Factory, to make Thinkwise perform the same calls. Using a process flow, we make the proper call, the same as we did using Postman.We get a correct token in Thinkwise. When we copy this token from the debugger, and check it with jwt.ms, we get a valid token. In fact, when we use this token in Postman to make calls, it works perfectly. So, token generation works properly.However, the calls that work i

I want to create a user in IAM which is only for service purposes. Nobody has ever to login on this user.Because we have many environments, I want to automate this.Creating the user is not a problem, but i do not know how to set the password with encryption.I see i need the password, a salt and the password-hash and then i understand that i can use the sql script:insert into usr_authentication (      [tenant_id]      ,[usr_id]      ,[password_hash]      ,[password_salt]      ,[password_algorithm]) Values ( … )but in what way can i determine the values of the hash?

When producing cube view graphs in Windos GUI we see an expected row where we have a Date type field: However, the Universal GUI shows this Date field as follows:  Question: how can we have a cube view where the row Date only shows a date without 'T00:00:00’? Please advise, thank you, Paul 

I'm having some trouble getting things to work. For a webservice we need to base64 encode our message before transmitting it. This worked fine untill we encountered a diacritical mark (ë, î, ú, etc) in the message we want to encode. Then the webservice we're contacting start throwing errors.I've created a test script to show the exact problem and to provide a starting point to hopefully find a solution to this issue. I contains a sample for a correctly encoded message and an invalid one. declare @source varbinary(max) ,@encoded varchar(max)--SAMPLE MESSAGES ONE WITH AND ONE WITHOUT DIACRITICAL MARKS DECLARE @message varchar(max) = 'Dit zijn diekrieten ë, î en ú.'; DECLARE @message2 varchar(max) = 'Dit zijn geen diekrieten e, i en u.';--KNOW CORRECT BASE64 RESULTS AS CALCULATED WITH THE OPENSSL LIBRARY DECLARE @message_base64 nvarchar(max) = 'RGl0IHppam4gZGlla3JpZXRlbiDDqywgw64gZW4gw7ou'; DECLARE @message2_base64 nvarchar(max) = 'RGl0IHppam4gZ2VlbiBkaWVrcmlldGVuIGUsIGkgZW4gdS4=';--BAS

Hi all, Is it possible to limit the access to OData API apart from the rights (insert/copy/delete/update) on a table given in the SF? Since we do not want every user /  user group to have access to the OData API, we would like to limit certain users / user groups.  Thanks in advance.

Hi all, I have a question concerning a failed synchronization to IAM. As can be seen on the image below, the synchronization to IAM has failed on the step ‘Synchornizing: project’. However, it doesn't seem possible to abort the failed synchronization. So, how do I abort a failed synchronization to IAM.I have tried to cancel it via maintenance → jobs, but this doesn't seem to work. Additionally, in maintenance → Jobs, the ‘active job’ isn't listed as an active job (second image) Thanks in advance. Failed synchronizationNo active jobError  

We have an internal API which consumes data from our Thinkwise application through Indicium. Up until recently we had been using Indicium Basic, however recently we have started our upgrade to Universal. For authenticating users with Indicium through the API, in Basic we used the URL indicium/(sf|iam)/<app_id>/$logout, to which we would send a basic authentication header supplied by the client calling the API. However, in Universal this endpoint does not seem to exist anymore. Is there a similar endpoint in Universal which allows us to authenticate users through a basic auth header? Other ways of authenticating users are of course also welcome, but some form of username/password authentication is preferred.Thanks in advance!