These forums are a place for learning, helping and sharing experiences with others about any of our products. Feel free to ask a question and get answers from our community and our most advanced users.
Note that these are public forums - anyone can view the discussions here.
VISIT OUR DIFFERENT FORUMS:
Announcements > | |
CloudShell > | TestShell > |
Developers > | BI (Business Inteligence) > |
This is where you can suggest your ideas to help and improve the product for everyone.
Please make sure to read the following article before posting a new idea, to get more information about the required information and ideas lifecycle.
Feel free to vote and comment on other ideas to promote them.
Thanks for everyone who suggested the ideas and voted for them.
Find, download and share integrations that can extend and enhance the CloudShell experience.
Integrations have several levels:
Certified - Officially tested and supported by Quali.
Preview - Provides a sneak peek to what the Quali team is developing. Officially supported by Quali. Feel free to experiment and comment, but please take into consideration that it is not yet tested and released.
Community - Integrations shared by community users. Feel free to look into what other users have contributed, please take into consideration that these integrations are not tested by Quali.
To learn more about creating Shells and integrating with CloudShell, use the following links:
CloudShell's Dev Guide > | Configuration Management > |
Getting started with Shells > | Extending CloudShell with Cloud Providers > |
Getting started with Orchestration > | API Guide > |
To share your integration, follow the instructions in this guide >.
George Rainovic suggested an idea (#3941) · Aug 23, 2018 at 09:59 PM · ssoportal
If SSO login is configured & used, the users can be automatically created in Quali DB. They can be placed into the groups based on rules defined in file "sso_group_rules.config.json". All good!
Problem: If the move from one department to another, we want users to be moved to a different group on Quali server. Automatically.
I think that the process of user 'reclassification' is very specific to every organization using Quali SW, and we do not expect Quali to write code to satisfy customer's complex business rules related to the user group membership.
We would like to have new functionality:
- on the Portal server
- for every successful login, SSO or local authentication
- write to local file: timestamp, username, all available SSO attributes
- if plain text files are used to store these records, make possible to rotate them
When this function is available, we can write our own code to periodically read the file, and put users into the right groups, set max reservation time, send them email notification, etc.
An assumption here is that user SSO attributes are enough to make decisions about moving user from one group to another.
Records about local authentication are not necessary for this functionality, but if records are written make sense to include these, too.
Maya Ber commented · Aug 27, 2018 at 06:44 PM
Thanks for the idea! We see some of the described functionality as something that should happen on the Identity Provider software (IDP) side. It is possible to use CloudShell’s API to get the existing users details and change users’ allocation to groups (GetUserDetails, UpdateUserGroups http://help.quali.com/Online%20Help/8.3/TestShell-API/TestShell%20XML%20RPC%20API.html)
George Rainovic commented · Aug 28, 2018 at 02:06 AM
Hi Maya,
That is not a real alternative, to ask IDP. I manage my Quali server and expect my server to tell me that data, without going to IT (IDP team) for it.
The API you mention is about what is already in my Quali server DB. In this idea, I am asking for something else.
Maya Ber commented · Aug 30, 2018 at 03:45 PM
Hi @grainovic, I undersatnd that in your case you don't have access to the IDP, and this makes things more complex. I'm not sure that writing login information to a text file is something that we would want to add to the product and would add value to the majority of users. I'm not entirely sure why it isn't possible to overcome this with our current API, is there information you're missing that our current API doesn't provide - any reason why you can't periodically get the list of all users and their information via API and make a decision on how to reassign to groups if needed?
These forums are a place for learning, helping and sharing experiences with others about any of our products. Feel free to ask a question and get answers from our community and our most advanced users.
Note that these are public forums - anyone can view the discussions here.
Announcements | |
CloudShell | TestShell |
Developers | BI (Business Inteligence) |
This is where you can suggest your ideas to help and improve the product for everyone.
Please make sure to read the following article before posting a new idea, to get more information about the required information and ideas lifecycle.
Feel free to vote and comment on other ideas to promote them.
Thanks for everyone who suggested the ideas and voted for them.
Find, download and share integrations that can extend and enhance the CloudShell experience.
Integrations have several levels:
Certified - Officially tested and supported by Quali.
Preview - Provides a sneak peek to what the Quali team is developing. Officially supported by Quali. Feel free to experiment and comment, but please take into consideration that it is not yet tested and released.
Community - Integrations shared by community users. Feel free to look into what other users have contributed, please take into consideration that these integrations are not tested by Quali.
To learn more about creating Shells and integrating with CloudShell, use the following links:
CloudShell's Dev Guide | Configuration Management |
Getting started with Shells | Extending CloudShell with Cloud Providers |
Getting started with Orchestration | API Guide |
To share your integration, follow the instructions in this guide.
Help us make things better. Share your great idea or vote for other people's.
Portal configuration to allow SSO to creata new user into domain admins group
Sandbox URL’s currently do not work if the recipient is not in the same domain as the sandbox.
Cloudshell portal: ability to copy the name of an app/resource directly from the diagram
Cloudshell portal should allow admins adding License/DMCA policy/other header/footer items
add the pdf diagram layout for exported blueprints
Move all Resource Management client functions to Cloudshell portal