Automate Registering IFS users using AppEngine

has anyone figured out how to register IFS users in EPM using Applicaiton Engine?

In order to dynamically create MDAC permissions all users need to be registered IFS users in EPM. Id like to figure out how to register any users that have permissions that arent currently in EPM.

Find more posts tagged with

Comments

Robert Thomas

We've developed this script. It uses an export of users from Mingle.

#define EngineVersion 5.0 #define RuntimeVersion 5.0 #include "CFO_WriteProcessHistoryV3","*" #include "CFO_Write_CUS_AppEngineLogV3","*" bool CFO_CreateRegisteredUserV3(string pUser, string attachmentId) @Description: "Creates Registed Users per Attachment"; @Category: "CFO_Utilities"; @Returns: "True if successful"; @Parameter[pUser]: "User login"; @Parameter[attachmentId]: "Attachment ID to use"; { /* Attachment Format: Same as Infor OS "Export all users". Note that only specific columns are using in this process Header Row: Yes Column 01: PersonId - Ignored Column 02: FirstName - Used for "Description" Column 03: LastName - Used for "Description" Column 04: EmailId - Used for UserName and UserIdentifier Column 05-nn: Security groups checked for BI-Administrators, BI-PowerUsers, BI-Viewers MAINTENANCE LOG ********************************************************************************************************************************************************************** * * Date Responsible Description of Change * ----------- ----------------------------------- ------------------------------------------------------------------------------------------------------------------ * 07/21/2020 Bob Thomas, CFO Solutions Initial Release * 08/20/2020 Bob Thomas, CFO Solutions Add support to add user to basic groups * 08/24/2020 Bob Thomas, CFO Solutions Add support for parameter of attachmentId * 03/19/2021 Bob Thomas, CFO Solutions Update to include logging * 03/22/2021 Bob Thomas, CFO Solutions Use new functions for retrieving process name and check if repository file exists * 04/01/2021 Bob Thomas, CFO Solutions Remove unused variable declarations * 05/12/2021 Bob Thomas, CFO Solutions Modified logging of skipped rows; added support to allow user register if a DEPMAPPS- role is present * 05/12/2021 Bob Thomas, CFO Solutions Updated to use CFO_WriteProcessHistory * 05/15/2021 Bob Thomas, CFO Solutions Updated to wrap CreateRegisteredUser inside of try/catch * 05/18/2021 Bob Thomas, CFO Solutions Updated to not skip rest of columns until index is greater than first security role * 08/12/2021 Bob Thomas, CFO Solutions Updated to use CFO_WriteProcessHistoryV3 & CFO_Write_CUS_AppEngineLogV3 * Enhanced logging * 08/19/2021 Bob Thomas, CFO Solutions Update to LogTrue for start and end * 09/02/2021 Bob Thomas, CFO Solutions Standardize logging * 09/03/2021 Bob Thomas, CFO Solutions Standardize logging; use RaiseError so close out code always executes * 11/17/2021 Bob Thomas, CFO Solutions Update logging ********************************************************************************************************************************************************************** Test params robert.thomas@cfosolutions.com CFOSLLC_DEM_UsersExport_03_19_2021_20_18_17.893108 */ // Define Constants string consProcessName = GetProcessName(); string consStagingDatabase = "DEPM_Staging"; string consDebug = "Debug"; string consInfo = "Info"; string consWarning = "Warning"; string consError = "Error"; bool consNotifyTrue = true; bool consNotifyFalse = false; bool consLogTrue = true; bool consLogFalse = false; int consCustomErrorCode = 1; string consStatusLevel_Starting = "Starting"; string consStatusLevel_Finished = "Finished"; AuthenticationSystem authIFS = AuthenticationSystemIFS; // Define Variables string strUser = StringTrim(pUser); int intLoadNum = ToInt(GetDateTimeAsString(CreateDateTime(), "MMddyyHHmm")); string strProcessGUID = Guid(); string strMessage = ""; int intWarningCount = 0; int intErrorCount = 0; DateTime dtProcessStartDateTime = CreateDateTime(); string errorMessage = ""; int errorNum = 0; // string attachmentId = "UsersToRegister"; Write("Step: Open SQL connection"); SQLConnection sqlConnect = SQLCreateNamedConnection(consStagingDatabase); strMessage = "****** " + consProcessName + " starting ******"; CFO_Write_CUS_AppEngineLogV3(sqlConnect, consProcessName, strUser, intLoadNum, strProcessGUID, consInfo, strMessage, consNotifyTrue, consLogTrue); strMessage = "Parameter: attachmentId " + attachmentId; CFO_Write_CUS_AppEngineLogV3(sqlConnect, consProcessName, strUser, intLoadNum, strProcessGUID, consDebug, strMessage, consNotifyTrue, consLogTrue); CFO_WriteProcessHistoryV3(sqlConnect, intLoadNum, strProcessGUID, consProcessName, strUser, consStatusLevel_Starting, "Process starting", strMessage); try { RepositoryConnection rc = CreateRepositoryConnectionExisting(); if (!RepositoryFileExists(rc, attachmentId)) { strMessage = "Error: Repository file " + attachmentId + " not found"; RaiseError(strMessage, consCustomErrorCode); } StringListList usersToCreateSLL = RepositoryReadCsvFile(rc, attachmentId); int numOfRows = Count(usersToCreateSLL); strMessage = "Number of rows in file " + ToString(numOfRows); CFO_Write_CUS_AppEngineLogV3(sqlConnect, consProcessName, strUser, intLoadNum, strProcessGUID, consInfo, strMessage, consNotifyTrue, consLogFalse); StringList listOfExistingUsers = SecurityGetUserNames(rc, authIFS); foreach(string existingUserName in listOfExistingUsers) { strMessage = "existingUserName " + existingUserName; CFO_Write_CUS_AppEngineLogV3(sqlConnect, consProcessName, strUser, intLoadNum, strProcessGUID, consDebug, strMessage, consNotifyFalse, consLogFalse); } bool firstRow = true; int intSecurityRolesStartIdx = 0; foreach(StringList row in usersToCreateSLL) { // skip header row if (firstRow) { foreach(string param in row) { if (param == "SecurityRole1") { strMessage = "Security roles start at index: " + intSecurityRolesStartIdx; CFO_Write_CUS_AppEngineLogV3(sqlConnect, consProcessName, strUser, intLoadNum, strProcessGUID, consDebug, strMessage, consNotifyFalse, consLogFalse); break; } intSecurityRolesStartIdx = intSecurityRolesStartIdx + 1; } firstRow = false; continue; } // Ignore row if no BI- or DEPMAPPS- permissions; usually means client has many Infor Apps but this user not authorized to dEPM bool blnFoundDEPMRole = false; int colIdx = 0; foreach(string param in row) { // get out after first blank element in security role list if (colIdx > intSecurityRolesStartIdx) { if (param == "") { break; } } if (StringContains(param, "BI-")) { blnFoundDEPMRole = true; continue; } if (StringContains(param, "DEPMAPPS-")) { blnFoundDEPMRole = true; continue; } colIdx = colIdx + 1; } if (!blnFoundDEPMRole) { strMessage = "Row does not contain BI- nor DEPMAPPS- roles; user will not see App in App Picker; skipping row for user: " + GetElementByIndex(row, 3); CFO_Write_CUS_AppEngineLogV3(sqlConnect, consProcessName, strUser, intLoadNum, strProcessGUID, consInfo, strMessage, consNotifyTrue, consLogFalse); continue; } colIdx = 0; string userName = ""; string userDescription = ""; foreach(string param in row) { // index 0 is PersonId if (colIdx == 0) { colIdx = colIdx + 1; continue; } // index 1 is FirstName if (colIdx == 1) { userDescription = param + " "; colIdx = colIdx + 1; continue; } // index 2 is LastName if (colIdx == 2) { userDescription = userDescription + param; colIdx = colIdx + 1; continue; } if (colIdx == 3) { // index 3 is EmailId userName = param; if (StringContains("infor.com", userName)) {break;} // Check if users already exists if (Contains(listOfExistingUsers, userName)) { strMessage = userName + " already exists"; CFO_Write_CUS_AppEngineLogV3(sqlConnect, consProcessName, strUser, intLoadNum, strProcessGUID, consInfo, strMessage, consNotifyTrue, consLogFalse); } else { try { SecurityCreateRegisteredUser(rc, authIFS, userName, userName, userDescription); strMessage = "User: " + userName + " Description: " + userDescription + " Added"; CFO_Write_CUS_AppEngineLogV3(sqlConnect, consProcessName, strUser, intLoadNum, strProcessGUID, consInfo, strMessage, consNotifyTrue, consLogFalse); } catch (errorMessage, errorNum) { strMessage = "SecurityCreateRegisteredUser Error: " + errorMessage + " Error Number: " + errorNum; CFO_Write_CUS_AppEngineLogV3(sqlConnect, consProcessName, strUser, intLoadNum, strProcessGUID, consError, strMessage, consNotifyTrue, consLogTrue); intErrorCount = intErrorCount + 1; break; } } if (Contains(row, "BI-Administrators")) { SecurityAddUserToBasicGroup(rc, authIFS, userName, "Administrators"); strMessage = "User: " + userName + " Added to Administrators Basic Group"; CFO_Write_CUS_AppEngineLogV3(sqlConnect, consProcessName, strUser, intLoadNum, strProcessGUID, consInfo, strMessage, consNotifyTrue, consLogFalse); } if (Contains(row, "BI-PowerUsers")) { SecurityAddUserToBasicGroup(rc, authIFS, userName, "Power Users"); strMessage = "User: " + userName + " Added to Power Users Basic Group"; CFO_Write_CUS_AppEngineLogV3(sqlConnect, consProcessName, strUser, intLoadNum, strProcessGUID, consInfo, strMessage, consNotifyTrue, consLogFalse); } if (Contains(row, "BI-Viewers")) { SecurityAddUserToBasicGroup(rc, authIFS, userName, "Viewers"); strMessage = "User: " + userName + " Added to Viewers Basic Group"; CFO_Write_CUS_AppEngineLogV3(sqlConnect, consProcessName, strUser, intLoadNum, strProcessGUID, consInfo, strMessage, consNotifyTrue, consLogFalse); } break; } } } RepositoryDisconnect(rc); } catch (errorMessage, errorNum) { strMessage = "Error: " + errorMessage + " Error Number: " + errorNum; CFO_Write_CUS_AppEngineLogV3(sqlConnect, consProcessName, strUser, intLoadNum, strProcessGUID, consError, strMessage, consNotifyTrue, consLogTrue); intErrorCount++; } DateTime dtProcessEndDateTime = CreateDateTime(); int intDurationSeconds = ToInt(GetDurationAsDouble(dtProcessStartDateTime, dtProcessEndDateTime)); strMessage = "****** " + consProcessName + " finished with " + intWarningCount + " Warnings and " + intErrorCount + " Errors; Duration (seconds): " + intDurationSeconds + " ******"; bool blnReturnCode = true; string strErrorLevel = consInfo; if (intErrorCount != 0) { strErrorLevel = consError; blnReturnCode = false; } else { if (intWarningCount != 0) { strErrorLevel = consWarning;} } CFO_Write_CUS_AppEngineLogV3(sqlConnect, consProcessName, strUser, intLoadNum, strProcessGUID, strErrorLevel, strMessage, consNotifyTrue, consLogTrue); CFO_WriteProcessHistoryV3(sqlConnect, intLoadNum, strProcessGUID, consProcessName, strUser, consStatusLevel_Finished, strMessage, ""); SQLDisconnect(sqlConnect); return blnReturnCode; }

0712131256598360.doc

Legacy Contributor

Hi Matthew!

For user management we use our own SQL tables including our own interface based on AppStudio reports. All our users are in our own SQL table from which we load via AppEngine script into the repository.

Since not all of our customers use IFS, our script is independent of the authentication system. In our SQL table we specify if the users are Basic or IFS users. For IFS users we have a power shell script that reads out all AD users that have access to Infor EPM. The SQL table of AD users is then updated e.g. every night, so that we always have the latest updates.

Note: We only use OnPrem installations.

Here is relevant part of the AppEngine script:

...

           //create an basic user
           if (sSSOType == "Basic" or sSSOType == "DecisionWare")
           {
               //check if the user already exists
               StringList slBasicUsers = SecurityGetUserNames(conRepository, AuthenticationSystem.Basic);

               if (Find(slBasicUsers, sUsername) == -1)
               {
                   // Log
                   digit_AddToLog(GlobalVariables, "Create basic user '" + sUsername + "'.
", "Debug");

                   // get the password from the table
                   string sPassword = SQLDataRowGetString(sdrUser, "Password");

                   // creates a basic user
                   SecurityCreateBasicUser(conRepository, sUsername, sPassword, sDescription, false);
               }
               else
               {
                   // Log
                   digit_AddToLog(GlobalVariables, "User '" + sUsername + "' already exists, update description.
", "Debug");

                   // only set the new description
                   SecuritySetUserProperty(conRepository, AuthenticationSystem.Basic, sUsername, UserProperty.Description, sDescription);
               }
           }
           else if (sSSOType == "Windows" or sSSOType == "IFS")
           {
               //check if the user already exists
               StringList slWindowsUsers = SecurityGetUserNames(conRepository, AuthenticationSystem.IFS);

               if (Find(slWindowsUsers, sUsername) == -1)
               {
                   // Log
                   digit_AddToLog(GlobalVariables, "Create windows user '" + sUsername + "'.
", "Debug");

                   // creates a windows user
                   SecurityCreateRegisteredUser(conRepository, AuthenticationSystem.IFS, sUsername, "", sDescription);
               }
               else
               {
                   // Log
                   digit_AddToLog(GlobalVariables, "User '" + sUsername + "' already exists, update description.
", "Debug");

                   // only set the new description
                   SecuritySetUserProperty(conRepository, AuthenticationSystem.IFS, sUsername, UserProperty.Description, sDescription);
               }
           }
       } ....

Legacy Contributor

Hi Bob!

This is unrelated to the original topic, but it looks like you are logging to a SQL table?

CFO_Write_CUS_AppEngineLogV3(sqlConnect, consProcessName, strUser, intLoadNum, strProcessGUID, consInfo, strMessage, consNotifyTrue, consLogFalse);

Do you have an AppStudio report for viewing your log? Or do you always look directly into the SQL table when you want to check something?

Robert Thomas

Yes, we are logging to a Stage table. By doing so, we have additional capabilities not available in the Infor standard logs (e.g. tying a multiple AppEngine step series of processes together using LoadNum and GUID).

Historically, we've been able to use in-place filtering in Relational Modeling to review our custom log table. We have processes in place to limit this size of the log by executing a purge daily - keeping x number of days in the custom log. However, since Infor implemented limitations on filtering large table without keys we've resorted to export to CSV and filter rows using Excel. We do have an effort underway to build AppStudio report that will allow us to filter the custom log table by any of the columns in the table e.g. when was process X last run? By who? etc.

Legacy Contributor

thanks Bob and Pascal. This is great info. Hadnt planned on using SQL as this isnt being used for full EPM functionality, just generating MDAC rules, but might be worth a look.

Legacy Contributor

I started logging to text files only. Now I'm also logging to a SQL table and currently trying to display the output nicely in an AppStudio report.

Since our users are not necessarily familiar with the technology in the background (AppEngine), my goal is to display error messages and information in such a way that the user can possibly fix some errors himself (e.g. an incorrect column structure in a CSV file import process).

Here are two screenshots how it currently looks like:

Copyright © 2025 Infor. All rights reserved.