Trigger a process model when SAML creates a new user

RE: Trigger a process model when SAML creates a new user

Harika — Tue, 07 Jun 2022 18:34:54 GMT

Yeah, It's supports group sync but the team who adds users to SAML Idp and the Team who give roles and responsibilities are different and more over we were already doing the group sync from database when we were using LDAP itself. So, Customer don't want to change that.

And the databases are on-premise and that is shared across multiple platforms.

RE: Trigger a process model when SAML creates a new user

Stefan Helzle — Tue, 07 Jun 2022 12:23:39 GMT

SAML supports group sync. Did you check this?

There is the SCIM standard which you could also look at.

RE: Trigger a process model when SAML creates a new user

Harika — Tue, 07 Jun 2022 12:17:02 GMT

We are already using LDAP sync in on-premise and now we are migrating to cloud which is a new version and doesn't support LDAP. So, we are going with SAML now.

RE: Trigger a process model when SAML creates a new user

chandhinir0002 — Tue, 07 Jun 2022 08:50:29 GMT

Please find the below link for more information.
community.appian.com/.../ldap-synchronization

RE: Trigger a process model when SAML creates a new user

Stewart Burchell — Tue, 07 Jun 2022 07:22:54 GMT

You'd be better off implementing an LDAP sync process that regularly (say nightly) creates/updates/deactivates user accounts between the repository that holds and authenticates your user community and Appian. By synchronising in this manner you can assure that User accounts already exist when someone SSOs into Appian and they already have the role(s) that you want them to have.

RE: Trigger a process model when SAML creates a new user

vikashk739 — Tue, 07 Jun 2022 07:14:09 GMT

Hi Harika,

You can create form to capture new user data and then you can trigger respective process model to add the users to groups

RE: Trigger a process model when SAML creates a new user

agam — Mon, 06 Jun 2022 00:12:14 GMT

Harika

I am not sure if you could really achieve a process model trigger on new user creation.

But, it also seems like you aren't using much of Appian's groups. If you can use role and responsibility assignment via groups, and not manage it through a DB table, you could map the user at tge time of creation to the right groups.

Was there a specific reason why you choose to implement role management through DB and not groups ?