Governance

Hi Appian Community, [mention:5357deb643314f689f0553cc98556414:23b05a61c3e5445190d9bfa00453bce4]  [mention:a11f77a729fb4db2af76b09948583328:e9ed411860ed4f2ba0265705b8793d05] [mention:92ac9d4559ff43edb28eaa01ed77691b:e9ed411860ed4f2ba0265705b8793d05]  In our recent Pen testing report it was found that JSessionID is Visible in the browser's Developer tools under Inspect functionalities. Creating Security concerns in pen testing report . Anyone had previously been with such issue or Have any Idea how to handle the scenario.   

We are trying to set up a Single sign-on for one of our environments and generated a self-signed certificate for SAML authentication using Apache OpenSSL. Now can we use the same generated certificate for one of our higher environments as well?Looking forward to the response. Thanks

Hi Team, I am configuring SSO in my application, but the flow isn't working. The logs indicate: "Signature was either invalid or signing key could not be established as trusted." In my SAML response, I see the authentication method x509 used by the IDP. Do I need to add any additional information besides the SAML configuration? </Attribute> <Attribute Name="">schemas.microsoft.com/.../authnmethodsreferences"> <AttributeValue>schemas.microsoft.com/.../AttributeValue> <AttributeValue>schemas.microsoft.com/.../AttributeValue> <AttributeValue>schemas.microsoft.com/.../AttributeValue> </Attribute>

Hi team, We recently planned to migrate the IDP configuration from one to another. During this migration, we did not delete the old IDP (IDP1) but added a new one (IDP2). However, when testing the new IDP (IDP2), we encountered a 401 error. Remarks: I have accounts in both IDPs with similar Email IDs. The first IDP (IDP1) works properly. When testing IDP2, the SAML response shows success (<samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status>), but we are receiving a 401 response. where i find the SMAL responce logs in appian In Idp2 responce we recevied name id and attribute(email) was different but we are using email id as AttributeValue of Username in appian Could you please assist in resolving this issue with IDP2? Thank you.

Please tell me how to set up dynamiclink when switching between interfaces.

Good afternoon, I am trying to compare in a foreach loop a data with the previous iteration, but I am not able to access this iteration, is there any way? I need to sort a list, but if there are two equal values ​​they have the same order, with the array{ name:"aaaaa", valor:2 name:"bbbbb", valor:10 name:"ccccc", valor:10 name:"ddddd", valor:10 name:"eeeee", valor:45}get as a result{ name:"aaaaa", pos:1 name:"bbbbb", pos:2 name:"ccccc", pos:2 name:"ddddd", pos:2 name:"eeeee", pos:3}I am trying to save the pos outside of the foreach in a local variable, or recover the value saved in pos of the previous item Thank you very much

Can I create a process model or a plugin to listen to user logins? I would like to create the user based on another API.

Hi all, I have a user account that was mysteriously deactivated. It may have been due to account inactivity but I would like to be sure. Are user account deactivations stored in the logs anywhere whether they are done manually or due to passing the inactivity threshold? Thanks, Christian W. Harris

Hi! Does anyone know how can I increase the rolling period for getting the login-audit.csv zipped using the log4j configuration? right now is a month and I need it to be three months. 

it apparently has no permissions, however it works when on interface, but it doesn't on the site. All permissions were conceded. This error message in instance details only happens when using the site itself. But when using the interface it doesn't. The S3 node simply doesn't access the document through the process model Any thoughts on it? Thanks in advance

I'm trying to use an OIDC connection to my Amplify page (Via AWS Cognito), but I'm getting an invalid nonce error. Is it mandatory to use nonce? I'm ignoring him on my page org.springframework.security.oauth2.core.OAuth2AuthenticationException: [invalid_nonce] Can someone help me?

When I use  package details api to get package details, it response error { "resource": "/suite/deployment-management/v2/applications/_a-0000ea0b-d034-8000-9c03-011c48011c48_12019827/packages", "title": "An Error Has Occurred", "error": "APNX-1-4552-038", "message": "Cannot access package details. Either this application does not exist or your service account does not have permission to view this application's details." } I created a service account, add Appian-API-Key to header. Also add Service Accounts group to application Users Group and Administrators Group, but can't fix the issue. How to fix the issue?

Hi, Please find attached screenshot. How to remove the list of dictionary with size 'o'

Hi,     I have got 2 mentions of my Process model in a health check report which 2 weeks ago  # of unattended process loops"PM Name " (UUID of PM ) -> "gateway for a loop" ((more...)"PM Name" (UUID of PM ) -> "sub process node" (11 node(more...) I couldn't really comprehend , what  "# of unattended process loops" really means ? Can someone explain it in simple terms ? At the moment , I am not sure whether this error is reported every time a health check is run , we run health checks  weekly in our organisation. waiting to see whether this error always occurs  what does the 11 nodes above means ? does this means active nodes in the instance ?  do they count gateways also as nodes ? Any idea whether , we can see "# of unattended process loops" in any of the system logs ? If so , which log ? Any pointer on how to fix the issue?  The PM in question , iterates over a number of DB

I would like to translate content into English(Canadian) with the help of Translation set. but English(Canadian) is not there in locale settings. Can we able to achieve this without using database. If yes, please guide me

Hi! Does anyone know how can I get the users access log? To see who hasn't logged in in the last three months, for example? I know that on the admin site in the supervision tab we can get the latest connections, but there is no history about those, and that's what I would need.

I am having trouble starting the application server on a new Appian 22.4 Windows installation. I am getting this in tomcat-stdout.log. Is there a solution to this? Thank you! 2024-06-11 15:42:49,629 [main] FATAL com.appiancorp.common.web.StartupHaltingServletContextListener - Halting JVM startupcom.appiancorp.suiteapi.common.exceptions.AppianException: java.lang.RuntimeException: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'userActivityFilter' defined in ServletContext resource [/WEB-INF/conf/security/spring-security-01-common.xml]: Cannot resolve reference to bean 'userActivityService' while setting constructor argument; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'userActivityService' defined in class path resource [com/appiancorp/common/persistence/search/AppianSearchSpringConfig.class]: Unsatisfied dependency expressed through method 'userA

Hi all, Where we can find the details in system logs when making changes to outbound email toggle under admin console??(who made the changes)

In our development environment, we have the process-analytics and process-execution engines running on one server, and the remaining engines running on another server (distributed mode). We would like to reconfigure this installation to have just one server running everything. Unfortunately, the server we want to remove is the server that runs the process-analytics and process-execution engines. Appian documentation says the following:"Appian does NOT support the removal of execution engines." My plan was to add the process-analytics and process-execution engines to the server we want to keep, start everything up so data replicates, take it all down again, and remove the engines from the second server. Would this be considered "removal of execution engines"? Or does that statement just mean we cannot completely remove an engine from all servers? Any advice would be appreciated. Thank you.

Thank you for your continued support.I would like to hear your opinions on obtaining system logs. Currently, we manually save some logs for maintenance operations. However, the number of logs is increasing day by day (especially integration logs), and we are concerned that manual management will become unmanageable. I would like to know the following three points. 1: Do you store Appian system logs separately? 2: Do you know how to automate the process of manually saving log files one by one? 3: Are there any other good ways? I apologize for bothering you during your busy schedule, but I would like to borrow your wisdom. Thank you in advance.... いつもお世話になっております。システムログの取得について、皆さんのご意見をお聞きしたく存じます。 現在、保守運用のためにいくつかのログを手動で保存しています。しかし件数は日に日に増加しており（特にintegrationのログが多いです）、手動管理では手に負えなくなることを懸念しております。 知りたいことは次の3点です。1：皆さんはAppianのシステムログを別途保管していますか？2：ログファイルを手動で1つずつ保存することを、自動化する方法をご存じですか？3：他にいい方法はありますか？ ご多用のところ恐れ入りますが、先人の知恵をお借りしたく存じます。よろしくお願いいたします。

I have a question about the system logs.Is there a log that shows the process model started by the user and the processing time of each node in that process model? Thanks

how to find a process models by a particular smart services named like create user , sub process and script task....how we can filter??

I am using a!startprocess function from an interface to save some data to db, now lets say the process model being called encounters a run time error in some node, i need to show the user some custom message like ' some error occured' in the interface , onError dosent work here , as there was no issue starting the process.

Good morning, I have a question reviewing the system metrics in the logs. I have a question, is there a way to see the metrics for each application in the environment? Thank you so much

Hello All , For creating bulk users , is this the correct way I can achieve -  Creating a process with UIT which will take the inputs and perform MNI on create user smart service . Please advice correct way to do this . TIA