Archive for category: Articles

To verify a user is set as a Ming.le user, we will use the IsMingleUser column as an example to complete the steps below:

1. Login and access the GEN data area
2. Navigate to the Actor List
3. Click Options (In the Web UI you will need to click the ellipsis first)
4. Select Personalize
   1. If this is the first personalization you will need to click create
   2. If you are updating an existing personalization you will need to click update
5. Click the + button > Add field
6. Click the Search button
7. Type ‘ism’ in the search field and hit enter
8. Select IsMingleUser from the list
9. Click OK
   1. If you wish to change the default label for the column, update the label box
10. Check the box next to Updateable
    1. Depending on your LMK version, you may need to add the field and then edit it to check the box next to “Allow data to be updated in the list”
11. Click OK

You are then returned to the actor list which will update and the IsMingleUser column will be added to the Actor List screen.

 

Note:

Other columns that you may want to add to assist with user provisioning include:

 

IsActorDisabled – make updateable

IsAckBodReq – make updateable

MingleId – make updateable

IsActorIFSDisabled

AccountLockout.IsAccountDisabled

 

Beginning with versions 2022.03.00..632 (MT) and 11.0.51.0.6489 (ST/OP) the following fields have been added as updateable to the default Actor List:

 

IsMingleUser

IsActorDisabled

IsActorIFSDisabled

IsAckBodReq

MingleId

Some Lawson Security systems are setup with a form of the user ID being a combination of the last name with middle initials / first name initials.

Something like DoeJ for John Doe. Often users get their names updated due to a marriage or divorce and their user ID never gets updated along with their last name.

1. To find the user by employee number, we need to first go to HR11 and find the user by their new last name to uncover their Employee ID.
2. For this example, let’s say we search John Doe and it returns an employee ID of 264
3. Now open Lawson Security Administrator and go to User Management >> Manage Identities
   
4. Once in Manage Identities under “Services”, select the employee identity service, ours is named TEST10_EMPLOYEE:
   
5. Select employee = <employee ID> and click Add Criteria
   
6. Once the criteria is added, Execute Query
   
7. You’ll be put to the results tab and if that user exists in Lawson security, it will show as so:
   

This type of work is typically done by a Lawson technical resource with a Security Administrator background. Organizations often hire a Lawson consultant team who offer managed services at a fixed monthly rate. These Lawson teams have a wider range of expertise and knowledge and are ideal for larger organizations but also are great for smaller ones that don’t need a dedicated Lawson employee on-site. Nogalis does offer this as a service so feel free to reach out to us via our contact page.

Here is a brief guide to get yourself set up with Spreadsheet Designer (ISD).

1. Ability to comment out rows and worksheet/s enhancement is available in ISD 10.0.16.245.
   
2. Click the Infor Button > Settings
   
   

The feature is disabled by initial install/upgrade. Check the Comments>Enable checkbox to turn on comments.

 

 

3. Using Row Comment
   • For row comment/s, insert “//<space>” or “// ”on first column of the row.
     
   • Click Upload/Upload Sheet Range/Upload All
     

 

** For Batch Upload, check Upload in Batch Mode in Settings, then repeat steps 4.1 and 4.2

 

 

4. Using Worksheet Comment
   • For Worksheet comment, insert “/*<space>” or “/* ”on first cell of the Worksheet (cell A1).
     

Or

• Click Upload or Upload All

** For Batch Upload, check Upload in Batch Mode in Settings, then repeat steps 5.1 and 5.2

 

In Lawson ISS, you may come across one or both of the two scenarios below:

1. I removed a role from a number of users in Lawson System Foundation (LSF) and want to use an Infor Security Services (ISS) sync to remove these same roles from Landmark (LMK).

or

2. I removed a role from a number of users in Landmark (LMK) and want to use an Infor Security Services (ISS) sync to remove these same roles from Lawson System Foundation (LSF).

 

There is a resolution for both of these scenarios:

A full ISS sync does not have the ability to remove roles from users. However, you can run a list-based sync via an ssoconfig command to remove the roles in the other system.

 

There is a flag that can be included in the list-based sync file that allows for roles to be overwritten in the system that is being updated called the mergeActorRoles flag. When this flag is not included in the xml file to be used, or is set to true, the roles from the source system (the one you are NOT updating) that are not found in the other system will be appended to the roles currently assigned. When this flag is set to false, mergeActorRoles=false, the roles assigned in the system that is being updated will be overwritten to match those in the source system, hence removing roles if necessary.

 

A list-based file template is delivered with each upgrade to ISS, you will use this file as a base for your work. The location of the file is:

 

GENDIR\system\provisioning\metadata\backgroundSyncTemplate.xml

Create a copy of the file and edit the copy, ensure the following are set:

 

defAction is set to update the system where the roles have NOT already been removed options:  update_remote or update_local

mergeActorRoles is set to false

IMPORTANT: The local and remote sections shown in the example below MUST be included since the users already exist in bot LSF and Landmark. These areas would contain each user to be updated.

Example of a completed list-based sync file that will update roles in LMK for existing users test1 and test2 to match roles in LSF:

Once you have the file the way you need it, you need to run the ssoconfig command for the list based sync.

The syntax for that is as follows and there is no ssoconfig password required for this process/command syntax:

 

ssoconfig -S sync_file_with_fullDirectoryPath

 

Example command for Windows customers:  ssoconfig -S D:\LSFPROD\gen\system\provisioning\metadata\FileNameOfBackgroundSyncTemplate.xml

Example command for Unix or IBM i customers: ssoconfig -S /LSFPROD/gen/system/provisioning/metadata/FileNameOfBackgroundSyncTemplate.xml

 

NOTE: In the above examples, if you placed the xml file for this process in another directory, simply replace the full path to the location of your xml file.