Open topic with navigation

TIBCO iProcess® Engine 11.9.1

# Attributes That Map to iProcess Properties

LDAP directory attributes are mapped to iProcess properties to provide the necessary information about iProcess users in the LDAP directory. Mapping LDAP Directory Attributes to iProcess Properties explains how to use LDAPCONF to set up these mappings.

Note that:

| • | LDAP directory attributes that are mapped to iProcess properties are indicated in this guide by the use of angled brackets. For example, <MENUNAME> indicates the LDAP directory attribute that is mapped to the iProcess MENUNAME property. (By default, this is the LDAP menuname attribute, but it can be any other LDAP attribute, such as, groupname.)

| • | An LDAP directory attribute that is mapped to an iProcess property must have a name that is no longer than 15 characters. Longer names will be truncated when the entries are downloaded to the iProcess Engine, which means that the mapping will be treated as invalid.

| • | An LDAP directory attribute does not allow the attribute to contain an underscore. An attribute with an underscore in iProcess Engine is mapped to an attribute without an underscore in LDAP. For example, the `SW_WISINST` attribute in iProcess Engine is mapped to the `SWWISINST` attribute in LDAP.

The following table describes the mappings between LDAP directory attributes and iProcess properties.

LDAP Directory Attribute Name | Default Attribute Value | iProcess Property Mapping
<MENUNAME> | menuname | Maps to the iProcess MENUNAME attribute. This mapping defines whether the entry represents an iProcess user, group or role. This attribute must be specified! If this attribute is not specified the entry is not added to iProcess (or is deleted if it already exists) when it is synchronized with the LDAP directory (see Synchronizing iProcess User Data with the LDAP directory). It can take the following values:
| • | USER - The entry is an iProcess user with a MENUNAME of USER.
| • | MANAGER - The entry is an iProcess user with a MENUNAME of MANAGER.
| • | PRODEF - The entry is an iProcess user with a MENUNAME of PRODEF.
| • | ADMIN - The entry is an iProcess user with a MENUNAME of ADMIN.
| • | GROUP - The entry is an iProcess group.
| • | ROLE - The entry is an iProcess role.
| • | NONE - The entry is not an iProcess user, group or role. (If the entry already exists in iProcess, it will be removed the next time synchronization takes place.)
For example: menuname=PRODEF menuname=GROUP
<USERNAME> | sn | Maps to the iProcess user name. Note: Remember that a valid iProcess user name must be 24 characters or less; if the LDAP directory attribute chosen has a value longer than 24 characters, the corresponding iProcess username is truncated to 24 characters (though usernames may also be constrained by the underlying operating system). For example: uid=johnf
<GROUPNAME> | groupname | Maps to the iProcess group name. For example: swgroup=purchas
<ROLENAME> | rolename | Maps to the iProcess role name. For example: swrole=chfpurch
<DESCRIPTION> | description | Maps to the iProcess DESCRIPTION attribute (for a user or group). For example: description=John Ford description=Purchasing Group
<LANGUAGE> | language | Maps to the iProcess LANGUAGE attribute (for a user or group). For example: lang=ENGLISH
<SORTMAIL> | sortmail | Maps to the iProcess SORTMAIL attribute (which defines how iProcess work items should be sorted for a user or group). For example: sort=PROCEDURE
<GROUPUSERS> | groupusers | Defines the iProcess users who are members of the group defined by this entry. See Defining Group Membership for more information about how to define values for this attribute.
<ROLEUSERS> | roleuser | Defines the iProcess user who is assigned to the role defined by this entry. For example: assignto=johnf
<QSUPERVISORS> | Optional | Specifies the iProcess users who are allowed to supervise the queue defined by this entry. For example: supervisors=johnb, swadmin If no value is specified for an entry, the default entry is that no supervisors are allowed to supervise the queue. If an incorrect value is specified (i.e. a user who is not a valid iProcess user), an error is reported in the TIBCO iProcess Administrator when the mappings are imported into iProcess.
<USERFLAGS> | Optional | Specifies what work items the user is allowed to forward in Work Queue Manager. It can take the following values:
| • | null - Step Forward. The user is allowed to forward a work item only if the step’s Forward permission has been set by the procedure definer.
| • | r - Forward None. The user is not allowed to forward any work item, even if the step’s Forward permission has been set by the procedure definer.
| • | f- Forward Any. The user is allowed to forward any work item, even if the step’s Forward permission has not been set by the procedure definer.
For example: forwardperms=f If one of the listed values is not specified the entry defaults to NULL.

Subtopics

Did you find this helpful?

Yes No
Great!
Thanks for taking the time to give us some feedback.
Sorry about that

Why wasn't this helpful? (check all that apply)

Could not find what I was looking for
Instructions confusing or unclear
Instructions did not work

Want to tell us more?

Please select at least one option or provide details about the issue!!

Error occurred while submitting feedback.

Error2 occurred while submitting feedback.

TIBCO iProcess® Engine

Copyright © 1994-2024. Cloud Software Group, Inc. All Rights Reserved.