Question
Schroders
GB
Last activity: 31 Jul 2023 6:03 EDT
Dynamically adding roles during user authentication
I am able to add the roles dynamically during the user authentication as explained in the below article.
https://docs-previous.pega.com/security/87/dynamically-adding-roles-during-user-authentication
However the roles are only added to the STANDARD thread and when ever tries to work on a case theses roles are not added as part of the case thread and the roles are coming from the default access group.
Is there any way to have these roles added dynamically to all the threads. If not what is the advantage we are gaining by adding the roles dynamically to the standard thread.
***Edited by Moderator Marije to add located SR ticket***
Bits in Glass
IN
@@SurendraPV I think you need to commit the access group after dynamically adding roles to reflect changes to all the threads. But I think this approach of dynamically adding roles to a access group doesn't work if user has multiple access groups. Because access group is not opened to change roles--> here roles are identified, set to value list using java code and role is saved.
Schroders
GB
@Anoop Krishna Commiting access groups will not solve the problem. The whole purpose it we want to avoid having multiple AG's.
Bits in Glass
IN
@@SurendraPV ok if commiting access group is not working then I think would have to raise SR. Just for a trial, maybe you can try using updaterecord activity on access group.
Bits in Glass
IN
@@SurendraPV were you able to find solution for this?
Schroders
GB
@Anoop Krishna No, It looks like PEGA doesn't support/
Bits in Glass
IN
@@SurendraPV okay. But seems like pega has given the above documentation for updating access roles right. Any luck with pega SR?
Updated: 31 Jul 2023 6:03 EDT
Pegasystems Inc.
GB
@@SurendraPV can you confirm your support ticket was INC-264300 ( Dynamic Allocation of Access Group Roles not working as expected) Closed July 27th? · (cc @Anoop Krishna )
Analysis: GCS analyzed issue required an SSO implementation but client changed their implementation and could not replicate the problem.
Attempted solutions : since the Roles are only added to the Thread created on log in and the dynamically added Roles are not propagated to any new Threads created it is not particularly useful.
Solution given:
"We have implemented a small test application to test the functionality of adding roles dynamically during user logging using the below link, and we can see that roles are being added with no issue,
https://docs-previous.pega.com/security/85/dynamically-adding-roles-during-user-authentication
We understand that you have managed to implement the same, but the added roles get removed after that,
@@SurendraPV can you confirm your support ticket was INC-264300 ( Dynamic Allocation of Access Group Roles not working as expected) Closed July 27th? · (cc @Anoop Krishna )
Analysis: GCS analyzed issue required an SSO implementation but client changed their implementation and could not replicate the problem.
Attempted solutions : since the Roles are only added to the Thread created on log in and the dynamically added Roles are not propagated to any new Threads created it is not particularly useful.
Solution given:
"We have implemented a small test application to test the functionality of adding roles dynamically during user logging using the below link, and we can see that roles are being added with no issue,
https://docs-previous.pega.com/security/85/dynamically-adding-roles-during-user-authentication
We understand that you have managed to implement the same, but the added roles get removed after that,
As this implementation will require the involvement of the consultancy team as they will be able to help and decide the correct way to implement this feature.
Although as per our last discussion have already changed your implementation as the feature was not working for you, We highly advise that you get in touch with your account manager regarding finding a consultancy resource to help to implement this feature, and they will be able to help and provide the required support."