QPR UI System Settings

From Mea Wiki
Jump to navigation Jump to search

This page describes all QPR UI system settings stored in QPR UI database in the CONFIGURATIONENTITY table. Some of the settings can be changed during the installation in the installation wizard, and all settings can be changed after the installation by changing them directly in the database. After settings have been changed in the database, QPR UI Windows service must be restarted so that the changes take effect.

The Setting name in the following tables is defined in the KEY_FIELD column of the CONFIGURATIONENTITY table.

System Settings

Settings for QPR Product Locations

Note for the QPR product locations: If the url starts with https, the connection is secure and requires that the hostname matches with the certificate provided by the contacted server. To confirm that, check that the url opens without security errors in the web browser.

Setting name (KEY_FIELD column) Description
MEA_SERVICE_LOCATION QPR Suite Web Service location. QPR UI uses this to access QPR Suite. In usual configurations, where QPR Suite is in the same server computer, the address is http://localhost/QPR2017-1/Portal/QPR.Isapi.dll/wsforward/MainService.svc/webHttp/. Note that you may need to change the QPR Suite version number in the url or the protocol (http/https).
PA_SERVICE_LOCATION QPR ProcessAnalyzer Web Service location. QPR UI uses this address to access QPR ProcessAnalyzer. In usual configurations, where QPR Suite is in the same server computer, the address is http://localhost/QPRPA/MainService.svc/webhttp/. Note that you may need to change the protocol (http/https) in the url.
QPR_REPORTING_EXPRESSIONS_WEB_SERVICE_LOCATION QPR Reporting Add-on Web Service location to fetch datasets. QPR UI uses this location to query to QPR Reporting Expression datasource. In usual configurations, the following setting can be used: http://localhost/QPRWebServicesExtensions/ExpressionAsDataset.ashx?xsession=<#meaSessionId>&expression=<#expression> (it may also be https).

This setting support the following tags which are replaced when the setting is used by QPR UI:

  • <#expression>: Contains the expression that is sent to the web service.
  • <#meaSessionId>: QPR Suite session id. This is empty if there is no session for QPR Suite. If Common QPR Authentication is used, QPR UI doesn't have the QPR Suite session id, and in that case this contains the QPR UI session id.
  • <#enticeSessionId>: Contains the QPR UI session id.

These tags can be used to fill the needed values for xsession and expression parameters in the QPR Reporting Add-on's ExpressionAsDataset.ashx operation.

Security Settings

Setting name (KEY_FIELD column) Description
AUTHENTICATION_SERVICES This setting is used to configure Common QPR Authentication to QPR UI. You can find more information by clicking the setting name.
ADMINISTRATORS_GROUP_NAME Name of QPR Suite (MEA) or QPR ProcessAnalyzer user group the members of which have administrator permissions in QPR UI. Other users have only viewer permissions. Note that if a user is not an administrator in QPR ProcessAnalyzer, user cannot see his/her own hidden groups memberships and thus the hidden memberships might not give administrator permissions in QPR UI. See more about QPR UI permissions.

Group memberships are synchronized to QPR UI when users log in, so if group memberships are changed during a user session, permissions changes are effective only when user logs in the next time.

ENTICE_USERS_GROUP_NAME

Name of QPR Suite (MEA) or QPR ProcessAnalyzer user group which members are allowed to login to QPR UI. If a user doesn't have permissions to log in to QPR UI, user gets an error message when trying to login.

Notes:

  • When ENTICE_USERS_GROUP_NAME is configured, also the ADMINISTRATORS_GROUP_NAME needs to be configured.
  • Users belonging to group ADMINISTRATORS_GROUP_NAME are allowed to login to QPR UI, even if not part of the ENTICE_USERS_GROUP_NAME.
  • New user accounts are always created to QPR Suite or QPR ProcessAnalyzers even if users doesn't have permissions to log in to QPR UI.
  • If a user is not an administrator in QPR ProcessAnalyzer, user cannot see his/her own hidden groups memberships and thus the hidden memberships might not give administrator permissions in QPR UI. See more about QPR UI permissions.
  • Group memberships are synchronized to QPR UI when users log in, so if group memberships are changed during a user session, permissions changes are effective only when user logs in the next time.
SESSION_EXPIRATION_TIME QPR UI user session expiration time in minutes. If this setting is not defined, by default this is 30 minutes.

Federated Authentication Settings (SAML 2.0)

Setting name (KEY_FIELD column) Description
FEDERATEDLY_MANAGED_GROUPS List of user groups that the federated authentication syncronizes for a user when the user logs in to QPR UI.
SAML_AUTOMATIC_LOGIN Federated authentication setting, described in the linked page.
SAML_CONSUMER_URL Federated authentication setting, described in the linked page.
SAML_METADATA_URL Federated authentication setting, described in the linked page.
SAML_REDIRECT_URL Federated authentication setting, described in the linked page.
SAML_SERVER_ENTITY_IDENTIFIER Federated authentication setting, described in the linked page.
SAML_SIGNING_CERTIFICATE Federated authentication setting, described in the linked page.
SAML_USER_DESCRIPTION_ATTRIBUTE Federated authentication setting, described in the linked page.
SAML_USER_EMAIL_ATTRIBUTE Federated authentication setting, described in the linked page.
SAML_USER_FULLNAME_ATTRIBUTE Federated authentication setting, described in the linked page.
SAML_USER_GROUPS_ATTRIBUTE Federated authentication setting, described in the linked page.
SAML_USER_ID_ATTRIBUTE Federated authentication setting, described in the linked page.
SYSTEM_USER_NAME QPR Suite and QPR ProcessAnalyzer administrator username. This setting is needed so that QPR UI is able to login to QPR Suite and QPR ProcessAnalyzer to set user information when the federated authentication is in use. Note that if you have both QPR Suite and QPR ProcessAnalyzer in use, they must use the same user account and password.
SYSTEM_USER_PASSWORD Password of the QPR Suite and QPR ProcessAnalyzer administrator username defined in SYSTEM_USER_NAME field. This setting is needed only when the federated authentication is in use. Note that if you have both QPR Suite and QPR ProcessAnalyzer in use, they must use the same user account and password.

Other settings

Setting name (KEY_FIELD column) Description
DB_VERSION QPR UI database version. Do not edit this field.
SCHEMA_VERSION QPR UI database schema version. Do not edit this field.
DEFAULT_VIEW_PATH Defines the view to be opened when a user logs in. The definition is a combination of the folder path and the view identifier. For example, to define a view in that is in the root folder as the default view, use: /ViewIdentifier, or a view in some other folder than the root folder: /Path/To/My/ViewIdentifier.

Changing System Settings

  1. Prerequisite: To change the system settings, you need to have write access to the QPR UI database in the SQL Server.
  2. Open SQL Server Management Studio and login to the database server.
  3. Browse the QPR UI database and expand it. Expand Tables, right click dbo.CONFIGURATIONENTITY and select Edit Top 200 Rows.
  4. If the setting that needs to be changed, already exists, you can change the setting value in the VALUE_FIELD column. The change is saved to the database right away, when the input field is defocused.
  5. If you need to add a new setting, add it to the bottom row with NULL.
  6. Restart QPR UI Windows service as follows: Open Services window in Control Panel, browse QPR UI service and click Restart).
Retrieved from "https://wiki.onqpr.com/mea/index.php?title=QPR_UI_System_Settings&oldid=12981"