[bcamara]

Hello everyone,
I have imported users from a Ldap list and also ... we have 2 Authentication Source : "advanced ldap" and "Global AD".
Now, now we have to switch their Authentication Source to "Global AD".

2 days i'm reading the forum and the web to find a script to do that, avoiding to update 200 users manually ... does anyone can help me ?
Thanks,

[amosbatto]

I don't have an Active Directory installation to check the values, but you have to change the values of the RBAC_USERS.USR_AUTH_TYPE and RBAC_USERS.UID_AUTH_SOURCE fields in the database.

Look in the database at the records of a user imported with Advanced LDAP and another user imported with Global AD and you can figure out which values to change. Then, you can go into the database and change the values with something like this:

Code: Select all

mysql -u root -p
mysql> use wf_workflow;
mysql> UPDATE RBAC_USERS USR_AUTH_TYPE='XXXXXXXXX', UID_AUTH_SOURCE='XXXXXXXXXXXXXX' WHERE USR_AUTH_TYPE='YYYYYYYYY';
mysql> exit;

[bcamara]

Thank you amosbatto ... i will try this.

[iekong]

i wish to integrate Azure SSO for all users. however, do not know the best approach to achieve that.

[amosbatto]

i wish to integrate Azure SSO for all users. however, do not know the best approach to achieve that.

There is no easy way to do it. You can add code to the verifyLogin() function defined in rbac/engine/classes/model/RbacUsers.php to connect to Azure SS0 and verify the login.

Some people write scripts that run every night to export the users and import them into processmaker. Here is an example script to do the importation:
https://wiki.processmaker.com/3.0/Proce ... t_of_Users

[amosbatto]

If you want to write PHP code to verify the login in Azure, see:
https://docs.microsoft.com/en-us/azure/ ... oauth-code

The PHP code to login using oauth2 in Azure should be very similar to this code to login to ProcessMaker using oauth2:
https://wiki.processmaker.com/3.1/OAuth ... cess_token
https://wiki.processmaker.com/3.0/Calli ... _Endpoints