Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Page Properties
hiddentrue
idDONE

Product Version
Report Note
Assignee

Resources & Remarks

Modification History

NameDateProduct VersionAction
Antje14/15 APR 20212021 SummerrDOC
Agnieszka19 APR 20212021 SummerrLANG
Antje21 FEB 20222022 Springconfigurable administrative roles


...

ParameterRequiredValuesDescription
general.displayNameHTMLNo (but recommended)<div class=\"yuv-brand-logo\">${DISPLAY_TENANT_NAME}</div>
<div class=\"yuv-brand-logo ymc\">${DISPLAY_TENANT_NAME}</div>
Sets the left hand side of the login page's icon and title. If not specified, the Keycloak realm HTML Display name will be set by default to "<div class="yuv-brand-logo">${DISPLAY_TENANT_NAME}</div>".
general.customMicroserviceNoURL

The URL of a custom microservice endpoint that will be called in each process of a tenant creation via the Tenant Management API. Thus, custom tenant preparations are supported.

A POST request will be sent to the specified URL during each tenant creation process. The request contains a header and body:

  • Header: The JSON Web Token the creation endpoint was called with. Since this must be done by a user with access to the system-controller endpoints (default: users with YUUVIS_SYSTEM_INTEGRATOR role), you can use its rights to further prepare the tenant (e.g., create a user with tenant administration rights who can apply a tenant-specific schema)
  • Body: The tenant name as string.

The call is asynchronous, the tenant creation does not wait for a response from the microservice.


general.customMicroserviceOnDeleteNoURLDefine the URL of the custom microservice that should be asynchronously called after deleting a tenant to remove additional custom settings.
general.supportedLocales[]NoList of ISO language terms e.g. ["en","de","es"]Defines which languages a user can select in the login dialogue of Keycloak. The default locales are en for English and de for German. Find more available locales in the Keycloak documentation.
general.defaultLocaleNoISO language term, e.g., "en"Determines the language of the invitation e-mails that will be sent to each user created during the tenant creation.
client.redirectUris[] (as of 2022 Winter)NoList of URIs, e.g. [https://example.com/*"]URIs used in Keycloak Client creation to set Valid redirect URIs.
Default URI (that are set as Valid Redirect URIs in Keycloak for Client creation. The default URI baseURL+"/*") will always be  is internally added to this list, only use this to set additional redirect URIsthe configured list. As of 2022 Winter, only the default is used for tenant creation.

email.hostIf using e-mailURLThe SMTP server to be configured in the Keycloak realm (e.g., for sending invitation e-mails).
email.portNoIntegerThe port of the SMTP server. Default is 25.
email.fromDisplayNameNoStringThe display name of the e-mail sender for administrative emails.
email.fromIf using e-maileMail addressThe sender of the administrative e-mails.
email.enableSSLNoBooleanDetermines if SSL is enabled (true) or disabled (false). Default is false.
email.enableStartTLSNoBooleanDetermines if TLS is enabled (true) or disabled (false). Default is false.
email.enableAuthenticationNoBooleanDetermines if the SMTP server requires authentication.
email.usernameIf using e-mail with authenticationStringThe user name for authentication against the SMTP server.
email.passwordIf using e-mail with with authenticationStringThe password for authentication against the SMTP server.
roles[]NoList of key value pairs with the following parameters.Section that allows to add custom roles (in addition to the pre-defined role setwhich will be available within each new tenant. The roles are specified by their name and a description.

roleNoString

The name of a role to be added to the tenant. The following roles are created per tenant by default:

  • YUUVIS_DEFAULT  (full access to every object via default role set)
  • YUUVIS_MANAGE_SETTINGS  (save result list column and filter configurations as standard)
  • YUUVIS_TENANT_ADMIN  (update schema, rolse set, manage users, ... for the tenant)
  • YUUVIS_SYSTEM_INTEGRATOR  (update global schemata and role sets for the system, create tenants) 
  • YUUVIS_MULTI_TENANT (easily switch between accounts in different tenants)

descriptionNoStringThe description of a role to be added to the tenant.
groups[]No

As of 2021 Autumn, not yet supported by yuuvis® architect and yuuvis® management console.

Specify groups that will be created in the tenant with the listed roles assigned to them.








user.users[]If additional users shall be createdList of key value pairs with the following parameters.If a tenant is created via Tenant Management API, a first user admin is always included. Here you can define additional initial users that will be set up in each tenant created. For each of them, the following configuration parameters are available.

usernameIf additional user is to be createdStringThe user name of the user to be created.
emailIf additional user is to be created, with e-mail invitationStringThe e-mail address of the user to be created.
firstNameNoStringThe first name of the user to be created.
lastNameNoStringThe last name of the user to be created.
roles[]NoList of StringsThe list of roles the user should be assigned to.
passwordIf additional user is to be created, without e-mail invitationString

The user password of the user to be created. It will be stored encrypted.

Not necessary when inviting users via e-mail. 

Note: The password policy must be met, see corresponding description of this tenant management API endpoint: 

POST /tenant-management/api/system/tenants

enabled
BooleanEnable (true) or disable (false) the user to be created. In most cases true is recommended.
temporaryPassword
BooleanIf you want to set up technical users that should not be forced to change their passwords while logging in for the first time, set false. The default is true.
user.withInvitation
BooleanDetermines if new users should be invited via e-mail. If true, you do not need to set a password during user creation. 

The default value is false.


...