Configuring Approval Verification with External Authentication

You can require users to enter their username and password when entering approvals ( or lifecycle promotions and demotions or to approve, reject, or abstain a route task) for systems with external authentication (Single Signon or SSO).

For information on additional verification configurations that can be implemented in non-SSO environments, see the step for setting the external authentication property in emxComponents.properties.

Before you begin:

These instructions only apply to external authentications that use SSO.

  1. Enable lifecycle signature approvals (only when using ENOVIA Business Process Services's lifecycle page, emxLifecycle.jsp):

    1. Depending on your SSO application, you may need to copy the file emxLifecycleSSOLogout.fcc from the ENOVIA_INSTALL/studio/Apps/Framework/CommonUI directory to the location used for SSO forms.
    2. In the emxSystem.properties file, set the following properties: 

          emxFramework.LifeCycle.ApprovalPasswordConfirmation=TRUE
          emxFramework.LifeCycle.ExternalAuthentication=TRUE
          emxFramework.LifeCycle.ExternalAuthenticationURL=URL

      Enter a URL appropriate for your SSO application.

    3. If you are using Library Central, update the emxLibraryCentral.properties file with the following setting: 

          eServiceLibraryCentral.General.FDACompliantSignatures = TRUE

  2. Enable route task approvals:

    1. Depending on your SSO application, you may need to copy the emxTaskSSOLogout.fcc from ENOVIA_INSTALL/studio/Apps/Framework/AppsCommon to the location used for forms.
    2. In the emxSystem.properties file, set the following: 

          emxFramework.Routes.EnableFDA=true

    3. In the emxComponents.properties file, set the following: 

          emxComponentsRoutes.InboxTask.ExternalAuthentication= TRUE
          emxComponentsRoutes.InboxTask.ExternalAuthenticationURL=URL

      Enter a URL appropriate for your SSO application.

  3. Run the warutil and deploy the archive file.

When using approval verification with SSO, the system redisplays the username and password page if the person enters incorrect information. The approval will not be accepted until a correct username/password pair is entered.