searchConfigName

Defines the search configuration that should be used to count objects.

During process execution the user must have the permission to execute the search configuration. It is possible to use a search configuration that searches over multiple levels.

minCount

-

The minimum number of objects that should be found.

If the search finds less than minCount objects, the action will trigger an ErrorBoundaryEvent with error code "uniquenessTestFailed". Although neither minCount nor maxCount are mandatory, at least one of them must be specified.

maxCount

-

The maximum number of objects that should be found.

If the search finds more than maxCount objects, the action will trigger an ErrorBoundaryEvent with error code "uniquenessTestFailed". Although neither minCount nor maxCount are mandatory, at least one of them must be specified.

resultVariableName

-

resultCount (used if nothing is specified)

Specifies where the number of found objects will be stored in the data map. 

The value is stored whether the condition is met or not. If no resultVariableName is specified, 'resultCount' is used as a default name.

<Datapool_Field>

-

For configuring search fields, add a parameter for each search field. The name of the parameter should be the full name of the datapool field. The value has to contain the filter condition and value, separated by a colon symbol.

For example:

EQUALS:${Person_PersonnelNumber}

GREATER_THAN:${now}

CONTAINS:st

If the underlying data source of the search configuration does not allow to query just the number of result objects, only as less objects as possible are fetched, but enough to find violations of minCount or maxCount. If the number of found objects equals to the upper limit, that was searched for, it is not possible to decide whether there are more objects. In such cases a hint is logged in debug mode:

"The search has been restricted to 2 object(s) for performance reasons, but there might exist more objects".

For more information, see <Datapool_Field> under Process: Execute Search Task.

resultVariableNameZipFile

Fieldname in the datamap where the builded zipFile is written to.

resultVariableNameZipName

-

Fieldname in the datamap where the name of the zipFile is written to.

zipfileName

Example value:

• ${Person_LastName}_${Person_FirstName}_Binaries.zip

How the zipFile shall be named. fileExtension like '.zip' is needed.

coreObjectDescriptorList

coreObjectDescriptor which contains a list of CoreObjects with binaryData

<name of the zipFile-Entry>

 (minimum 1)

<name of binaryField to save into zipFIle>

Example value:

• ${Person_LastName}_${Person_FirstName}_Photo.jpg
  ← Person_Photo

• ${Person_LastName}_${Person_FirstName}_Softtoken.p12
  ← Person_Softtoken

• Additional parameter, added with "+"

• Combination zipEntryName ← BinaryFieldName

userNameOutputField

-

userinfoUsername

The output field of the datamap which will contain the user name.

userFullNameOutputField

-

userinfoUserFullName

The output field of the datamap which will contain the user's full name.

userIdOutputField

-

userinfoUserid

The output field of the datamap which will contain the user id.

userIpAdressOutputField

-

userinfoIpAddress

The output field of the datamap which will contain the user's IP address.

userAuthProfileTypeOutputField

-

userinfoAuthprofileType

The output field of the datamap which will contain the users AuthProfileType (Enum is passed).

userExplorerInstanceIdOutputField

-

userinfoExplorerInstanceId

The output field of the datamap which will contain the user's explorer instance ID if logged in through explorer.

userUsspInstanceIdOutputField

-

userinfoUsspInstanceId

The output field of the datamap which will contain the user's Smart ID Self-Service instance ID if logged in through Smart ID Self-Service.

userRolesOutputField

-

userinfoUserRoles

The output field of the datamap which will contain the user's assigned roles as a list. This is not meant to be used for the GUI and may result in issues. Use this, for example, in gateways like this:

${userinfoUserRoles.contains("Administrator") == true}

userSamlTokenIDOutputField

-

userinfoSamlTokenID

The output field of the datamap which will contain the user's SAML Token ID.

userSamlIssueInstantOutputField

-

userinfoSamlIssueInstant

The output field of the datamap which will contain the user's SAML IssueInstant.

userLocaleOutputField

-

userinfoLocale

The output field of the datamap which will contain the user's selected Locale.

referenceField

The field to be deleted in secret field store.

scriptName

The name of the script.

EntityDataPool

Person

The name of the entity's datapool.

EntityAttribute

Email

The attribute of the entity that must match a certain value.

EntityAttributeValue

${Person_Email} or ${user.Person_Email}

The value that EntityAttribute must match. Most of the time, an expression will be used here. Also special expressions like ${user.*} are possible, to use values from the authenticated User or from system.properties (${sysprop.*}

EntityCoreObject

The core template of the entity. This limits the search to objects of this core template.

EntityCoreObjectIdField

coreObjectId

The field in which the CoreObjectId is added in the process map.

EntityCoreObjectDescField

coreObjectDescriptor

The field in which the CoreObjectDescriptor is added in the process map.

EntityRolesField

roles

The field in which the roles of the object is added in the process map.

ExclusiveLoadFields

FirstName,LastName,Email

If not the complete dataset should be loaded, only the ones defined here are loaded/added in the process map.

TargetPrefix

Manager_

If the found objects fields should be added to the process map with a special prefix. It replaces the <Datapool_>, which is otherwise at this position. With this function, conflicting entries can be avoided.

Example: Instead of "Person_Email" the data map will get an additional entry: "Manager_Email".

certificateDataPoolName

Certificate

The name of the certificate's datapool.

certificateDataFieldName

Data

The name of the field of the certificate's datapool that holds the binary certificate.

certificateAttribute

Example value:

• SAN_UPN

The field of the certificate whose value must match the entity. SAN values are prefixed with "SAN_". Possible values: any one of de.nexus.pkiutils.certificate.DNs or any one of de.nexus.pkiutils.certificate.SANs. Currently that allows the following possibilities: DN_C, DN_CN, DN_DNQ, DN_E, DN_L, DN_O, DN_OU, DN_SN, DN_ST, DN_UID, DN_STREET, DN_INITIALS, DN_POSTAL_ADDRESS, DN_POSTAL_CODE, DN_TELEPHONE_NUMBER, DN_TITLE, DN_SURNAME, DN_GIVENNAME, SAN_EMAIL, SAN_UPN, SAN_DNS, SAN_IP, SAN_URI, SAN_GUID, SAN_RID.

entityDataPoolName

Person

The datapool of the entity to loadCertificateMatchingEntityParameterizedTask

entityDataPoolFieldName

Email

The name of the field of the entity's datapool that must match the certificate's field value.

entityCoreTemplateName

-

Person

The core template of the entity. This limits the search to objects of this core template.

targetFieldName

Name of systemProperty to load

Combination of target field and system property.

A system property is defined of <contextid>.<propertyName>.

loggerName

Any String, but typically a java package optionally followed by a class name.

Example values:

• MyLogger

• de.nexus

• de.nexus.MyClass

In the log4j configuration, defined loggers have a name, typically a package name or a class, however any String is valid. This attribute specifies to which logger this task will write. You can use this to route the log message to a file, the console or any other appender.

loglevel

Valid values:

• TRACE

• DEBUG

• INFO

• WARN

• ERROR

Use this to describe the severity of the log entry. It will appear in the logfile. Loggers and/or appenders typically ignore entries under a configurable threshold.

message

Any String or JUEL expression.

Example values:

• This is a message

• ${Person_Name} just executed this task

• ${Person_Name.toUpperCase()} just executed this task

The message that will be logged. You can use Expression Language and methods from the String API. Expressions will be evaluated against the process map.

ignoreKeyNotFound

Valid values:

• true

• false

If this is set to true, expressions from the message that can't be resolved to a key in the process map will be ignored. If it is set to false, an exception will be thrown.

OutputVariableName

Specifies the name of a variable of the data map, in which the process instance ID should be put. 

EntityDatapoolName

The name of the entity's datapool.

variableName

Datapool_Field1

variableName2

Datapool_Field2

variableName3

Datapool_Field3

...

...

firstSecretFieldName

String value

UID of the first secret field

secondSecretFieldName

String value

UID of the second secret field

resultFieldName

String value

Default value: secretsAreEqual

The name of the variable in the processMap that will contain the result of the comparison.

searchConfigName

Select in drop-down list

The searchConfig, which is executed to search the list of X509-Certificates

encCertResultCoreTemplate

Select in drop-down list

The name of a CoreTemplate to store the found encryptionCertificate in the Database, if it does not already exist with this CoreTemplate name.

encCertResultDescriptorName

String value

The name of the variable in the processMap where the found encryptionCert is put as CoreObjectDescriptor

X509ListFieldInSearchResult

String value

The field in the result of the searchConfig with the list of certificates.

<Datapool_Field>

-

Additional Filter-Field for the searchConfig, added with '+'-Button

For more information, see <Datapool_Field> under Process: Execute Search Task.

setEmptyAsNull

Valid values:

• true

• false (default)

Defines if a variable without a value should stay empty or null.

<variableName>

-

<variableValue> 

The name and value of the variable. It can be also a combination of expressions that gets resolved from current values of the process map.

Example:

• Person_Name

• MyTestVar

• ${part1} ${part2}

<variableName2> 

-

<variableValue2> 

...

-

...

Fill in as many variables as needed.