Hi Community,

 

I am trying to implement JIT when a user is not present. But by default it is creating a user as "Company Employee". Any suggestions how I can identify and create either Company Employee or Portal user based on the response that has been received in the SAML token.

I have followed the following two articles:

  1. Single Sign-On via ADFS
  2. Just-In-Time User Provisioning

 

Thanks,

Sourav Kumar Samal

Like 2

Like

3 comments

Hi All,

 

Can anyone answer on this?

 

Thanks,

Sourav

Dear Sourav, 



I would suggest you to carefully check the web.config file located in the root folder of Creatio. 

In this file you can find the list of login providers (the place where you enabling JIT by the guide):



        <provider name="SsoAuthProvider" type="Terrasoft.WebApp.Loader.Authentication.SSO.SsoAuthProvider, Terrasoft.WebApp.Loader">

          <parameters>

            <add name="UserType" value="General" />

            <add name="UseJit" value="false" />

          </parameters>

        </provider>

        <provider name="SSPSsoAuthProvider" type="Terrasoft.WebApp.Loader.Authentication.SSO.SsoAuthProvider, Terrasoft.WebApp.Loader">

          <parameters>

            <add name="UserType" value="SSP" />

          </parameters>



If you want to enable JIT for portal user you need to make sure that key <add name="UseJit" value="false" /> is added to the block related to the "SSPSsoAuthProvider"

so it looks like:

    <provider name="SSPSsoAuthProvider" type="Terrasoft.WebApp.Loader.Authentication.SSO.SsoAuthProvider, Terrasoft.WebApp.Loader">

          <parameters>

            <add name="UserType" value="SSP" />

            <add name="UseJit" value="true" />

          </parameters>



After that please make sure that SspLogin.aspx is specified in all keys instead of NuiLogin.aspx to make sure that user will get a proper portal cookie in case if you want to use a Service Provider initiated SSO flow to create portal users. 

Also please note that in this case ordinary company employees will have to login via direct link only or use the link to NuiLogin.aspx module if they want to use SSO as well. 



Kind regards,

Roman

Roman Brown,

Does this mean we can only use Jit either for Portal User or for Company Employee user?

 

Regards,

Sourav

Show all comments

Hi,

 

while filling a record in detail I am getting the below error 

What does this error means?

 

When I tried compiling the site I again get the below error

What does this error means?

 

I don't see any linking between these errors. Can anyone please help?

 

Many thanks!

Like 0

Like

2 comments

The 2nd error is resolved I figured out the reason is that the field name(code) is same as the section name(code).



But I didn't find out the reason of 1st error. 

Hi,

 

As for the first error message, find this Id from the error message in the UI sources in the developer console F12 -> Sources tab -> Search and see which object is returned in ViewModule.aspx when searching for the Id from the error message (like here https://community.creatio.com/questions/how-overcome-item-unique-identi…). Then you need to remove the SysModule record from the system that is related to the object found in the UI sources.

 

Best regards,

Oscar

Show all comments

We have concerns about security of lodash module used in client app. As we understand, version 4.17.19 is used in 7.18.5. Do you plan to update it, or can we have an instruction on how to do so. Thanks in advance!

https://www.ibm.com/support/pages/security-bulletin-lodash-versions-prior-41721-vulnerability-powerha#:~:text=Vulnerability%20Details&text=js%20lodash%20module%20could%20allow,arbitrary%20commands%20on%20the%20system.

Like 0

Like

0 comments
Show all comments

Hello,



I have a requirement to add a Dynamic Case Management (DCM) for detail on portal. Is there any possible way to achieve this?

Thank you.

Like 2

Like

1 comments

Hello Balaka,

 

Sorry for the delay with the response. Unfortunately, it is not possible to add cases to the detail page because the DCM module is not compatible with the detail page. 



We will create a request for the R&D team to implement functionality to create a DCM in the detail pages as well. 

 

Best regards,

Bogdan

Show all comments

We need to import some data to inactivate contacts on a monthly basis. I want to import a contact identifier and then execute a business process to mark the imported contacts as inactive.

 

We have other import needs that also need to execute a business process for each row. 

 

Does anyone know of any utility/marketplace add on that will allow us to execute a bp for each import row?

 

Ideally, it would be great to be able to have a BP system function that would import a file and then process each row, but I'd take a scripted object to read the file in and process each row.

Like 0

Like

1 comments

Hi Marry,



Unfortunately, are no such basic tools for imported records/

 

The only way to achieve your business task is to create a new business process with a start signal with an event that should trigger the signal (Record added / Record modified).



Please note you should enable this business process before the import and disable afer.

 

Best regards,

Bogdan

Show all comments

Hi Team,

 

Kindly provide me some resolution for the following scenario:

 

In the instance, there is one parent object 'Enquiry' and 'EnquiryForInsurers' is the child object of Enquiry. Now , I deleted one lookup field from the parent object Enquiry and published the object successfully.

 

But while I'm updating the child object EnquiryForInsurers, I'm facing the error which says failed to update the database structure. Although the deleted lookup field is not there in the inherited columns of the child object EnquiryForInsurers, but still I'm not able to publish the child object successfully.

 

Please refer to the screenshots for errors information.

 

 

 

kindly help in resolving this error..

 

Thanks,

 

Sarika

 

 

 

Like 0

Like

2 comments
Best reply

The issue was in the foreign key constraint left in the database after the column was deleted from your object and this constraint prevented the database structure from being updated. We've removed that foreign key and the issue was fixed.

 

Best regards,

Oscar

The issue was in the foreign key constraint left in the database after the column was deleted from your object and this constraint prevented the database structure from being updated. We've removed that foreign key and the issue was fixed.

 

Best regards,

Oscar

Hi Oscar,

 

Thanks for the help

Show all comments

Hi All,

 

We have a requirement to enable SSO with OKTA. Please suggest whether is it possible? If yes, how we can do that?

 

Thanks & Regards,

Sourav Kumar Samal

Like 0

Like

5 comments

Hello,

 

Yes, it is possible to set up SSO through OKTA. Unfortunately, we do not have specific instructions for this product, but you can use the Single Sign-On via ADFS Academy article for your reference. 

 

Best regards,

Bogdan

 

 

Bogdan,

 

We are also trying to configure from OKTA's side as well. But there are certain ask that we are unsure about. Could you please suggest on the following questions from Creatio perspective?

Thanks,

Sourav

Bogdan,

Is there any information on this?

 

Thanks

Sourav, 



This application is in "Upcoming" state meaning that it will be available in Future. 

As for your first question, you need to insert following values:

 



Kind regards,

Roman

 

Roman Brown,

 

What is the LocalCertificateFile and where to get this for onsite applications?

 

Thanks,

Sourav

Show all comments

i need to disable a button after it is clicked once without refreshing a page.

Like 0

Like

2 comments

Add a boolean attribute to the page:

attributes: {
    "IsButtonEnabled": {
		dataValueType: Terrasoft.DataValueType.BOOLEAN,
		type: Terrasoft.ViewModelColumnType.VIRTUAL_COLUMN,
		value: true
	}
}

Then bind the enabled property of the button to the attribute:

{
	"operation": "insert",
	"parentName": "Header",
	"propertyName": "items",
	"name": "MyButton",
	"values": {
		"itemType": Terrasoft.ViewItemType.BUTTON,
		"caption": "My button",
		"click": {"bindTo": "onMyButtonClick"},
		"enabled": {"bindTo": "IsButtonEnabled"}
	}
}

Now when it is clicked, set the attribute to false:

onMyButtonClick: function() {
    this.set("IsButtonEnabled", false);
}

Ryan

Ryan Farley,

Hi Ryan, thank u for ur asnwer, is it for Classic or Freedom UI?

 

Show all comments

Hello,



I have a requirement to bind Organizational Roles to the package. I have come across some similar questions on academy and found that we can use SQL script to perform the same. Could someone please help with this if they are familiar with this approach or have done this activity previously. Thank you

Like 2

Like

2 comments

Hello,

 

Thank you for your question. 

 

Please, note that it's not recommended to bind users, organizational structure, roles, licenses, and other administrative things to a package. It will be very hard to handle that if you decide to install that package after the moment when the client adjusts that administrative things according to his or her needs directly on the production.

 

Unfortunately, there is no script we could provide you with but in case you decide to bind this data and transfer it to another environment we suggest checking all changes on the copies before delivering it to the production websites. The organizational structure is in the "SysAdminUnit" and "SysAdminUnitInRole" tables and you are right, it's possible to bind it to the package via SQL scripts only.

 

Best regards,

Anastasiia

We usualy do the following:



Create separate package for Roles

1. Add Data for SysAdminUnit 

2. Add Data for SysUserInRole



Before you install the package

Switch off trigger TRSysAdminUnitRoot in table SysAdminUnit (otherwise it will block adding new roles)



Install the package

 

Switch on trigger TRSysAdminUnitRoot in table SysAdminUnit



And always remember, that deleting of data cannot be transfered without SQL script

Show all comments

Hello 

When creating a new Task the system automatically sets the task duration 30 minutes. How can I change this default value?

 

There is an older question about it, but I can't find that line that is mentioned there  

 

Thanks in advanced for your help!

Like 0

Like

3 comments
Best reply

Hello Cesar,

 

Unfortunately, there is no option to change the default value anymore.

As a workaround, you are able to change the duration after creating the task.

 

Thank you,

Artem. 

Hello Cesar,

 

Unfortunately, there is no option to change the default value anymore.

As a workaround, you are able to change the duration after creating the task.

 

Thank you,

Artem. 

Hello Artem,

 

In version 8.0.10, is it possible to change the default value assigned to the duration of activities?



Thank you,

Andreia

 

 

Hello Andreia,

 

Unfortunately, this option is still not available at the moment. However, a task has already been registered in our R&D team to consider and implement such a feature in future releases.

 

 

Show all comments