Security, Passwords and Permissions


Locking Designer Element

This document demonstrates how to use Designer Element Locking feature secure certain elements’ (like Rules, Flows, Forms or Reports) Edit Action. Example: First, we navigate to System > Settings...

How to Run Decisions With TLS-1.0 Disabled

This document describes how to set up environment to run Decisions with TLS-1.0 disabled. First, we need to make sure that we use Microsoft SQL Server 2012 Service Pack 3 or higher. In this example we...

Emergency Password Reset Tool

The Emergency Password Reset Tool allows a user on the host machine to reset any user's password from the command line. This utility is particularly useful in the event that an administrator's password needs to be reset, or after a malicious intrusion.

Configuring Accounts, Groups, and Module Rights

An account represents a user of the system and can be either a person or a machine. To access the portal, the user must have a valid, active account. The permissions associated with a user's account allow...

Self-Register an Account

[embedplusvideo height="350" width="700" editlink="http://bit.ly/19LG0DH" standard="http://www.youtube.com/v/lAhGSJKrJcI?fs=1" vars="ytid=lAhGSJKrJcI&width=700&height=350&start=&stop=&rs=w&hd=0&autoplay=0&react=1&chapters=&notes="...

Recover or Reset a Password

When a user chooses to recover a password, the system mails the user's current password to the email address associated with the user account. When a user chooses to reset a password, the system generates a random password and sends it to the email address associated with the account.

Temporary Account Impersonation

[embedplusvideo height="350" width="700" editlink="http://bit.ly/1cKIG8P" standard="http://www.youtube.com/v/fFaDDPvivRA?fs=1" vars="ytid=fFaDDPvivRA&width=700&height=350&start=&stop=&rs=w&hd=0&autoplay=0&react=1&chapters=&notes="...

Change Own Password

There are a few ways a user can change his/her own password, depending upon permissions:

Locking Out User After Failed Login Attempts

Users can be locked out of the portal after a number of failed login attempts. To set the number of login attempts to accept, open the Edit Portal Settings pop-up, select the Enable Account Lockout checkbox...

Adding and Removing Folder Security

Folder security sets access to the contents of a folder, including the entities stored in the folder and the actions that can be performed on them. Depending on a report's filters, folder security may also restrict how data displays on reports.

About Folder & Portal Permissions

Portal folder security sets access to the contents of a folder, including the entities stored in the folder and the actions that can be performed on them. Depending on a report's filters, folder security...

Changing Password Policy

The user account password policy can be configured by an Administrator using six different settings to make the password requirements more stringent.     To set up the password policy, navigate...

Enable Self-Registration of Users

The Portal has options for allowing a user to self-register. This allows the user to create an account and log in to the system. The administrator enables this feature (it is disabled by default). This...

Using Assignment Roles

Assignment roles are like contextually modifiable user groups. They behave similarly to groups with two major differences: (1) they can contain groups as well as users, and (2) they can be customized from...

Adding a User Account

Accounts represent authenticated users of your system, which can be actual people or machines. Adding a user account can be done by navigating to System > Security > Accounts and click the Create...

Setting up Active Directory (AD) Server Authentication

An Active Directory (AD) server can be used to synchronize users, computers, groups, or organizational units to the Portal's account base. An account can either be a person or a machine.

Creating an Active Directory (AD) Sync Job

Active Directory (AD) systems can be synchronized with this system to automatically create local accounts through scheduled sync jobs.   NOTE: A prerequisite to creating an AD sync job is that AD...

About Active Directory Authentication and Synchronization

Active Directory Requirements AD authentication in general requires that the IIS server have the IIS Authentication modules for Basic, Digest, and Integrated Windows authentication installed. (This is...

Adding a Group

Groups are collections of accounts that share a common set of responsibilities, such as testers, developers, or marketing staff. By organizing accounts into groups, permissions, assignments and other...

Using Base Groups

Using base groups is a way to associate different groups with one another. When you associate a base group (for example, Group A) with another group (Group B), all members of the new group (B) automatically...

Adding an Account to a Group

  Accounts represent authenticated users of your system, which can be actual people or machines. Groups are collections of accounts that share a common set of responsibilities, such as testers, developers,...

Changing a User's Password

Administrators have permission to reset account passwords at-will.

Disabling a User Account

User accounts can be disabled within the portal. Disabling a user account can be done by navigating to System > Security > Accounts, select the Edit Account action and, in the resulting Edit Entity...

Invite User to Join Portal

The Show Invite Action setting, when enabled under System > Settings > Portal Settings, creates an Invite User option in the Security folder menu and enables an Invite User button. This allows an...

Force User to Change Password

User accounts can be configured so that the next time a user logs on they are required to change their password before being able to use the portal. This is especially useful when an admin creates a new...

Allowing Users to Self-Register

[embedplusvideo height="350" width="700" editlink="http://bit.ly/19LGMk8" standard="http://www.youtube.com/v/baJCTcUytFQ?fs=1" vars="ytid=baJCTcUytFQ&width=700&height=350&start=&stop=&rs=w&hd=0&autoplay=0&react=1&chapters=&notes="...

Enabling a Guest Account

Enabling a Guest account is an optional user account that can be used to get non-portal users, such as an outside vendor for example, to engage in a flow. The guest account user is enabled under System...

Enabling Guest Permission to Folder

The Guest account is an optional user account that can be used to get non-portal users, such as an outside vendor for example, to engage in a flow.

Configuring User Account to Receive SMS Text Messaging

The system sends notifications in the form of email, popup message within the portal, SMS text, Twitter, or a custom method. To allow a user to receive notifications using SMS, the user's phone information...

Encryption Keys And The Installer

Intro Encryption keys are stored on the application server, intentionally outside the database to ensure that the data that’s secured is not stored with the key that secures it. When you have an existing...

Setting up a User's Timezone

A user's account can be assigned a timezone. Once saved, the user's timezone will show up in audit history, in reports, when creating and completing tasks, and elsewhere. Example To set a timezone...

API Calls Via Named Session

This example demonstrates how to use Named Session in cases when User should never use Decisions Portal but for example need to interact with Flows, Forms, Rules or Reports that live in the Portal. First,...

User Context Types and Options

To make Rest or SOAP calls to Decisions it is important to know how to use User Context in the call. User Context is a required part of the service call to Decisions. This tutorial demonstrates different...

Single Sign-On With SAML

This tutorial demonstrates how to setup Decisions single sign-on with SAML. Example: First, we are going to need the following information from the Identity Provider (external application) to set up...

Create Named Session

A named session makes it possible to pass in a specific user account when invoking a workflow via REST without exposing the user account information. Instead, a session ID is used in the URL. To create...