{"id":16187,"date":"2018-10-08T04:57:28","date_gmt":"2018-10-08T04:57:28","guid":{"rendered":"https:\/\/ephesoft.com\/docs\/?p=16187"},"modified":"2020-12-03T14:34:24","modified_gmt":"2020-12-03T21:34:24","slug":"checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2-and-multiple-group-support","status":"publish","type":"docs","link":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2-and-multiple-group-support\/","title":{"rendered":"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 2 and Multiple group Support"},"content":{"rendered":"<p class=\"gmail-MsoNormal\"><b>Ephesoft configuration with ADFS over SAML 2.0 with Authentication Type 2 and Multiple Group Support<\/b><\/p>\n<p class=\"gmail-MsoNormal\">This wiki provides you details related to what all configuration needs to be taken care of when configuring Ephesoft with ADFS over SAML 2.0 with Authentication Type 2.\u00a0Authentication Type 2 means we are authentication and authorizing using SSO when users are associated with more than one group.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Understanding Multiple Group Support<\/strong><\/p>\n<p>Single Group Support means that each user is associated with only one group and that group will by default get the super admin rights because in applicationSecurtiy-Context.xml file we define that the group that it fetches should be assigned the super admin roles. If you see constructor-arg index =&#8221;2&#8243; we have defined the value as true which means that the group that it fetches will have super user access.<\/p>\n<p><a href=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/ephesamlfilter.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-16172\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/ephesamlfilter.png\" alt=\"\" width=\"1059\" height=\"181\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/ephesamlfilter.png 1059w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/ephesamlfilter-300x51.png 300w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/ephesamlfilter-768x131.png 768w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/ephesamlfilter-1024x175.png 1024w\" sizes=\"(max-width: 1059px) 100vw, 1059px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>In Multiple Group Support a user can be associated with more than one group and therefore we need to make some additional changes in the configuration files to support this feature.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Pre-requisite:<\/strong><\/p>\n<ol>\n<li>Active Directory Federation Services Installed<\/li>\n<li>Active Directory Installed.<\/li>\n<li>Ephesoft Transact 4.5.0.0 or onwards Installed<\/li>\n<li>Understanding and already configured the files as mentioned in\u00a0<a href=\"https:\/\/ephesoft.com\/docs\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2\">Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 2<\/a> article.<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p><strong>Configuration Files Required<\/strong><\/p>\n<ol>\n<li>Already listed files in wiki article\u00a0<a href=\"https:\/\/ephesoft.com\/docs\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2\">Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 2.<\/a><\/li>\n<li>application.properties file<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p><strong>Checklist components:<\/strong><\/p>\n<hr \/>\n<p><strong>Existing Configuration:<\/strong><\/p>\n<ul>\n<li>Complete the configuration changes already mentioned in the wiki article\u00a0<a href=\"https:\/\/ephesoft.com\/docs\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2\">Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 2.<\/a><\/li>\n<\/ul>\n<hr \/>\n<p><strong>Additional changes:<\/strong><\/p>\n<p><span style=\"text-decoration: underline\">web.xml<\/span><\/p>\n<ul>\n<li>Uncomment multi-group functionality section in web.xml.<\/li>\n<li>Add the group names in\u00a0AdminGroups and\u00a0OperatorGroups to the groups to which you want to provide Administrator and Operator Roles respectively.<\/li>\n<li>If you have more than one groups than separate the groups with comma (,)<\/li>\n<li>Make sure you are change\u00a0groupNameDelimiter from semi colon (;) to comma (,)<\/li>\n<\/ul>\n<p><a href=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/webxml.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-16192\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/webxml.png\" alt=\"\" width=\"1122\" height=\"498\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/webxml.png 1122w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/webxml-300x133.png 300w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/webxml-768x341.png 768w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/webxml-1024x455.png 1024w\" sizes=\"(max-width: 1122px) 100vw, 1122px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><strong>Note: <\/strong><\/p>\n<ol>\n<li><strong>Admin Groups are not Super Admin Groups here. Difference between Admin and Super Admin group is that Super Admin group has access to all pages including System Configuration Page whereas Admin group doesn&#8217;t have access to SystemConfiguration Page. Make sure you only provide Admin Group names and not Super Admin Group Names.<\/strong><\/li>\n<li><strong>Sample configuration file can be downloaded from <a href=\"http:\/\/download.ephesoft.com\/Ephesoft_Product\/SSO_AJ\/AuthenticationType2\/web_multigroup.zip\">here<\/a>.<\/strong><\/li>\n<\/ol>\n<hr \/>\n<p><span style=\"text-decoration: underline\">application.properties<\/span><\/p>\n<ul>\n<li>This file is used to define Super Admin Group Names.<\/li>\n<li>If we want to provide super admin roles to more than one group then separate the two groups with double semi colon(;;)<\/li>\n<li>Two properties that require change is\u00a0 user.super_admin where we define super admin groups and\u00a0update_super_admin_group where we will need to change the flag to true.<\/li>\n<li>As you see in the below screenshot we are providing Super Admin access to users who are a part of\u00a0Ephesoft-SystemAdministrator and Ephesoft-TestSuperAdmin groups<\/li>\n<\/ul>\n<p><a href=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/applicationproper.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-16193\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/applicationproper.png\" alt=\"\" width=\"758\" height=\"326\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/applicationproper.png 758w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/applicationproper-300x129.png 300w\" sizes=\"(max-width: 758px) 100vw, 758px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>Note:<\/p>\n<ol>\n<li><strong>Sample configuration file can be downloaded from <a href=\"http:\/\/download.ephesoft.com\/Ephesoft_Product\/SSO_AJ\/AuthenticationType2\/application.zip\">here<\/a>.<\/strong><\/li>\n<\/ol>\n<hr \/>\n<p><span style=\"text-decoration: underline\">applicationContext-Security.xml<\/span><\/p>\n<ul>\n<li>Only change required in this xml file is to set\u00a0&lt;constructor-arg index=&#8221;2&#8243; value=&#8221;false&#8221;\/&gt; in epheSamlFilter bean to false or to keep the value blank\u00a0&lt;constructor-arg index=&#8221;2&#8243; value=&#8221;&#8221;\/&gt;<\/li>\n<\/ul>\n<p><a href=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/appcontextSec.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-16194\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/appcontextSec.png\" alt=\"\" width=\"1085\" height=\"174\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/appcontextSec.png 1085w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/appcontextSec-300x48.png 300w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/appcontextSec-768x123.png 768w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/appcontextSec-1024x164.png 1024w\" sizes=\"(max-width: 1085px) 100vw, 1085px\" \/><\/a><\/p>\n<p>Note:<\/p>\n<ol>\n<li><strong>Sample configuration file can be downloaded from <a href=\"http:\/\/download.ephesoft.com\/Ephesoft_Product\/SSO_AJ\/AuthenticationType2\/applicationContext-security_mutligroup.zip\">here<\/a>.<\/strong><\/li>\n<\/ol>\n<hr \/>\n<p>&nbsp;<\/p>\n<p>Once above changes are completed then all you need to do is to restart the ephesoft service and Ephesoft is now integrated with Multi Group Support.<\/p>\n","protected":false},"featured_media":0,"parent":47679,"menu_order":3,"comment_status":"closed","ping_status":"closed","template":"","doc_tag":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v19.0 (Yoast SEO v22.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 2 and Multiple group Support | Ephesoft Docs<\/title>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 2 and Multiple group Support\" \/>\n<meta property=\"og:description\" content=\"Ephesoft configuration with ADFS over SAML 2.0 with Authentication Type 2 and Multiple Group Support This wiki provides you details [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2-and-multiple-group-support\/\" \/>\n<meta property=\"og:site_name\" content=\"Ephesoft Docs\" \/>\n<meta property=\"article:modified_time\" content=\"2020-12-03T21:34:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/ephesamlfilter.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2-and-multiple-group-support\/\",\"url\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2-and-multiple-group-support\/\",\"name\":\"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 2 and Multiple group Support | Ephesoft Docs\",\"isPartOf\":{\"@id\":\"https:\/\/ephesoft.com\/docs\/#website\"},\"datePublished\":\"2018-10-08T04:57:28+00:00\",\"dateModified\":\"2020-12-03T21:34:24+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2-and-multiple-group-support\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2-and-multiple-group-support\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2-and-multiple-group-support\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/ephesoft.com\/docs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Transact\",\"item\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"System Configuration\",\"item\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"User Connectivity\",\"item\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"Active Directory Resources\",\"item\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/\"},{\"@type\":\"ListItem\",\"position\":6,\"name\":\"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 2 and Multiple group Support\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/ephesoft.com\/docs\/#website\",\"url\":\"https:\/\/ephesoft.com\/docs\/\",\"name\":\"Ephesoft Docs\",\"description\":\"Intelligent Document Processing Made Easy\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/ephesoft.com\/docs\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 2 and Multiple group Support | Ephesoft Docs","robots":{"index":"noindex","follow":"follow"},"og_locale":"en_US","og_type":"article","og_title":"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 2 and Multiple group Support","og_description":"Ephesoft configuration with ADFS over SAML 2.0 with Authentication Type 2 and Multiple Group Support This wiki provides you details [&hellip;]","og_url":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2-and-multiple-group-support\/","og_site_name":"Ephesoft Docs","article_modified_time":"2020-12-03T21:34:24+00:00","og_image":[{"url":"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/ephesamlfilter.png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2-and-multiple-group-support\/","url":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2-and-multiple-group-support\/","name":"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 2 and Multiple group Support | Ephesoft Docs","isPartOf":{"@id":"https:\/\/ephesoft.com\/docs\/#website"},"datePublished":"2018-10-08T04:57:28+00:00","dateModified":"2020-12-03T21:34:24+00:00","breadcrumb":{"@id":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2-and-multiple-group-support\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2-and-multiple-group-support\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2-and-multiple-group-support\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ephesoft.com\/docs\/"},{"@type":"ListItem","position":2,"name":"Transact","item":"https:\/\/ephesoft.com\/docs\/products\/transact\/"},{"@type":"ListItem","position":3,"name":"System Configuration","item":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/"},{"@type":"ListItem","position":4,"name":"User Connectivity","item":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/"},{"@type":"ListItem","position":5,"name":"Active Directory Resources","item":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/"},{"@type":"ListItem","position":6,"name":"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 2 and Multiple group Support"}]},{"@type":"WebSite","@id":"https:\/\/ephesoft.com\/docs\/#website","url":"https:\/\/ephesoft.com\/docs\/","name":"Ephesoft Docs","description":"Intelligent Document Processing Made Easy","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ephesoft.com\/docs\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"}]}},"comment_count":0,"_links":{"self":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/16187"}],"collection":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/comments?post=16187"}],"version-history":[{"count":0,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/16187\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/47679"}],"next":[{"title":"Configuring Ephesoft Transact with ADFS over SAML 2.0 using Apache Tomcat","link":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-tomcat\/","href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/16196"}],"prev":[{"title":"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 2","link":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2\/","href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/16146"}],"wp:attachment":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/media?parent=16187"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/doc_tag?post=16187"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}