Wrong security label for User SQL UM in mixed authentication

  • 16 February 2021
  • 0 replies
  • 37 views

Userlevel 5
Badge +20
 

Wrong Security Label for User SQL UM in Mixed Authentication

kbt139975

PRODUCT
K2 blackpearl 4.7
BASED ON
K2 blackpearl 4.7
This article was created in response to a support issue logged with K2. The content may include typographical errors and may be revised at any time without notice. This article is not considered official documentation for K2 software and is provided "as is" with no warranties.
LEGACY/ARCHIVED CONTENT
This article has been archived, and/or refers to legacy products, components or features. The content in this article is offered "as is" and will no longer be updated. Archived content is provided for reference purposes only. This content does not infer that the product, component or feature is supported, or that the product, component or feature will continue to function as described herein.

Issue

After Configuring SmartForms for SQL Server User Manager (SQLUM), you may find a similar problem to below:

 

When you login with K2:DenallixK2service with Form Authentication, note that the user in AD is not the user in SQLUM. 

 

If you select "check out" to edit some views using K2:DenallixK2service, the views can't be edited because you are logged in with K2SQL:DenallixK2service. The K2 security label always logs in with K2SQL:DenallixK2service.

 

Image

 

Also if you try to access K2 management, the error is shown: 'You don't have sufficient permissions to access Management' while the K2:DenallixK2server user does have permission to access this site.

Image

Symptoms

The mixed authentication configuration may not be right:

Image

Resolution

To resolve this, you need to add in the configuration for the Security Label section for the K2SQL claim configuration, and duplicate the claim configuration for the K2 security label linked to FormsSTS.

Please refer to the following three screenshots below: 

 

1. Claims_FormsSTS

Image

 

2. K2 FormsSTS
 

Image

 

3. K2SQL FormsSTS
 

Image

 

You need to add the configuration for the Security Label section to the K2SQL claim configuration, and duplicate the whole claim configuration for the K2 security label linked to FormsSTS.

0 replies

Be the first to reply!

Reply