topic Re: Provide Custom information to Activiti-app using Activiti-LDAP Sync in Alfresco Archive

Provide Custom information to Activiti-app using Activiti-LDAP Sync

dilip_chenani — Mon, 19 Oct 2015 10:31:30 GMT

Hi Folks,I have configured OpenDJ LDAP server with my Activiti-app. Have provided all the necessary properties in activiti-ldap.properties file and was able to successfully sync all Users from LDAP server to Activiti-app. All the users are now available in 'users' table.Here i have one custom requir

Re: Provide Custom information to Activiti-app using Activiti-LDAP Sync

jbarrez — Tue, 20 Oct 2015 15:18:08 GMT

No, that's currently not possible. The tenantId is a database generated identifier.
What you could do (but that is custom coding) is to use the name or add a new column to the tenant table to sync and match your tenant information.

Re: Provide Custom information to Activiti-app using Activiti-LDAP Sync

dilip_chenani — Tue, 20 Oct 2015 16:46:09 GMT

Yes I understand I can use the tenant Id name column to put my specific tenant Id and the activiti-app tenant Id is auto-generated.
But how to even sync the tenant name. Currently activiti ldap sync takes the id of the tenant-admin to assign the same tenant to all users. How can I sync tenant_id specific to each user. Mine is a multi-tenant system. And I will be using the same activiti-ldap.properties file for syncing all users. Currently it allows me to supply only one tenant-admin and hence only one tenant information to sync users with at one time.
Let us visualise it like this. After Activiti-LDAP sync, my users table should contain tenantId column filled with specific tenant ID's that were supplied by ldap.

Please advise how can we achieve this. I tried some solutions provided on the forum, but none seem to be solving the above problem.

Re: Provide Custom information to Activiti-app using Activiti-LDAP Sync

jbarrez — Wed, 28 Oct 2015 16:44:11 GMT

I do understand your problem, but it would need custom coding to get it done. Currently, the LDAP synchronisation uses a provided tenant Id for all the users it finds in the LDAP server. The default one won't allow to change that.

In the upcoming 1.4 release, we've extracted the LDAP sync into an interface and abstract superclass you can use to match what you need: it will allow you (with a bit of custom code, not much) to set the tenant Id specifically for the user. In the upcoming 1.4 docs, this is documented in the section 'Custom Identity Synchronization'.

Re: Provide Custom information to Activiti-app using Activiti-LDAP Sync

dilip_chenani — Thu, 17 Dec 2015 06:18:53 GMT

Thanks. Can I know the tentative date when 1.4 will get released?

Also, Current version of Activiti-Admin does not provides LDAP sync as Activiti-App does. How can we achieve same sync functionality in Activiti-Admin as well?

Re: Provide Custom information to Activiti-app using Activiti-LDAP Sync

jbarrez — Tue, 22 Dec 2015 10:54:04 GMT

1.4 has been released in the meantime (last week Friday) 🙂

No, the admin app doesn't have syncing: the reasoning is that only a handful of people have access to the admin app. And it would complicate the setup a lot too.

Re: Provide Custom information to Activiti-app using Activiti-LDAP Sync

dilip_chenani — Sun, 17 Jan 2016 15:19:29 GMT

If tenant id information is included as a User information such as email,firstname,lastname.., In that case will this new extension "Custom Identity Synchronization" helpful to me? I think in that case i would have to write LdapUser.java with my custom attributes . Will that be a good design. Where can i find example for Custom Identity Synchronization?

Also its not allowing me to create my custom LdapSyncService as explained in docs. Its throwing BeanCreationException : expected single matching bean but found 2: bpmLDAPSyncService,ldapSyncService

Re: Provide Custom information to Activiti-app using Activiti-LDAP Sync

jbarrez — Thu, 21 Jan 2016 07:00:49 GMT

You can't define a new LDAPSyncService, but you can define a class that calls the regular one, while looping over all tenants in the system and calling the sync service for each of them.

Re: Provide Custom information to Activiti-app using Activiti-LDAP Sync

pteki — Thu, 23 Jun 2016 14:16:53 GMT

we have the LDAP full sync set up and has been working fine with the users query. modified the query, as not all app level users are getting pulled into activiti and all the manually added users are becoming inactive after the sync. The query is pulling the process users, but still these ids becoming inactive. Can you help where is the gap is?

Re: Provide Custom information to Activiti-app using Activiti-LDAP Sync

jbarrez — Mon, 27 Jun 2016 08:44:18 GMT

The ldap sync will disable any users that are defined, but are not in LDAP. They are treated like this, because this is effectively seen as a delete from LDAP. However, this only should happen with users who have an 'externalId' defined. If they don't have an externalId, the user won't be deactivated.