Is there any guide to setting up the regular SR App Guest Access in an LDAP environment (Not WorkCenters)? Not sure what to do with the MGUEST account that needs to be setup and the password that will be tied to it and putting that in the system property. Can I simply ask my IT to create a MGUEST account and have it pushed to Maximo then use the same pw we set for the ldap account and type it into the
mxe.system.guestpassword   system property?

Also simply set
mxe.guestuserid = MGUEST
mxe.system.guestuser = MGUEST
mxe.webclient.guestLoginEnabled = 1
mxe.webclient.guestLoginURL = ../login/guestlogin.jsp

I have a PMR in top get the guestlogin.jsp

Any issues with doing this in an LDAP env and will i run into a roadblock down the line? I am concerned about the handshake down the line when a person pushes Guest Login button in an LDAP env and if that will block this from working?

On a side note: Can we clone the SR app and get the Guest Login to run our clone vs the OOTB SR ? Just curious?

Thanks,
David Miller

I'm not sure if we have any documentation on that functionality. That was initially pushed by Control Desk and never officially made it into Maximo (though the only piece missing is that JSP file). I'm not sure whether it would work in LDAP scenarios.

The login page handles the authentication to establish a standard Maximo session. Like any user session, it starts in your default app (Start Center by default) but you can configure that for any of the self-service applications (CREATESR, VIEWSR, etc.) on the user record. The user would have the traditional Maximo experience, including things like utilizing the Go To menu, change insert sites or profile information, and in the case of native authentication, even the ability to change passwords.

Be aware that the Guest user functionality is only allowed to be utilized in self-service applications. It would be a violation of licensing to give it access to the SR application for example because that is not allowed as a self-service user and requires a license for each user utilizing that capability. They can use the CREATESR, VIEWSR, etc. apps or the new SR work center where they can only create and perform basic updates to the SRs. 

Is there any guide to setting up the regular SR App Guest Access in an LDAP environment (Not WorkCenters)? Not sure what to do with the MGUEST account that needs to be setup and the password that will be tied to it and putting that in the system property. Can I simply ask my IT to create a MGUEST account and have it pushed to Maximo then use the same pw we set for the ldap account and type it into the
mxe.system.guestpassword   system property?

Also simply set
mxe.guestuserid = MGUEST
mxe.system.guestuser = MGUEST
mxe.webclient.guestLoginEnabled = 1
mxe.webclient.guestLoginURL = ../login/guestlogin.jsp

I have a PMR in top get the guestlogin.jsp

Any issues with doing this in an LDAP env and will i run into a roadblock down the line? I am concerned about the handshake down the line when a person pushes Guest Login button in an LDAP env and if that will block this from working?

On a side note: Can we clone the SR app and get the Guest Login to run our clone vs the OOTB SR ? Just curious?

Thanks,
David Miller

I'm not sure if we have any documentation on that functionality. That was initially pushed by Control Desk and never officially made it into Maximo (though the only piece missing is that JSP file). I'm not sure whether it would work in LDAP scenarios.

The login page handles the authentication to establish a standard Maximo session. Like any user session, it starts in your default app (Start Center by default) but you can configure that for any of the self-service applications (CREATESR, VIEWSR, etc.) on the user record. The user would have the traditional Maximo experience, including things like utilizing the Go To menu, change insert sites or profile information, and in the case of native authentication, even the ability to change passwords.

Be aware that the Guest user functionality is only allowed to be utilized in self-service applications. It would be a violation of licensing to give it access to the SR application for example because that is not allowed as a self-service user and requires a license for each user utilizing that capability. They can use the CREATESR, VIEWSR, etc. apps or the new SR work center where they can only create and perform basic updates to the SRs. 

------------------------------
Steven Shull

Original Message:
Sent: Sat March 05, 2022 09:54 AM
From: David Miller
Subject: Guest URL functionality for Work Center Service Request, in an AD/LDAP enabled environment.

Is there any guide to setting up the regular SR App Guest Access in an LDAP environment (Not WorkCenters)? Not sure what to do with the MGUEST account that needs to be setup and the password that will be tied to it and putting that in the system property. Can I simply ask my IT to create a MGUEST account and have it pushed to Maximo then use the same pw we set for the ldap account and type it into the
mxe.system.guestpassword   system property?

Also simply set
mxe.guestuserid = MGUEST
mxe.system.guestuser = MGUEST
mxe.webclient.guestLoginEnabled = 1
mxe.webclient.guestLoginURL = ../login/guestlogin.jsp

I have a PMR in top get the guestlogin.jsp

Any issues with doing this in an LDAP env and will i run into a roadblock down the line? I am concerned about the handshake down the line when a person pushes Guest Login button in an LDAP env and if that will block this from working?

On a side note: Can we clone the SR app and get the Guest Login to run our clone vs the OOTB SR ? Just curious?

Thanks,
David Miller

------------------------------
David Miller
Managing Partner - Maximo Consultant
Enterprise Integration Partners LLC

Original Message:
Sent: Mon February 21, 2022 02:50 PM
From: Steven Shull
Subject: Guest URL functionality for Work Center Service Request, in an AD/LDAP enabled environment.

I'm not sure why we have security-constraints documented in the web-guest.xml but I can't see how this would ever work with them uncommented in that file. The purpose of the guest authentication flow is to submit requests as an unauthenticated user. If you enable these security constraints, you'd have to have an authenticated user session via WebSphere (or WebLogic) prior to it allowing you to access it. Can you confirm that you do not have security constraints enabled in the web-guest.xml?

And, for clarity, you should have the security constraints enabled in the web.xml for maximouiweb.

I've not tried this but I believe the guest SR utilizes API keys which should hit /maximo/api. If that's the case, it wouldn't be impacted by how you authenticate to Maximo since this should not have a security-constraint defined and thus would pass through the application server authentication.

Assuming your web-guest.xml is correct (security constraints are left commented out) and you're still having problems, let me know the specific error you're getting in developer tools.

------------------------------
Steven Shull

Original Message:
Sent: Mon February 21, 2022 08:09 AM
From: Patrik Nilsson
Subject: Guest URL functionality for Work Center Service Request, in an AD/LDAP enabled environment.

We have istalled Work Centers and we have a Guest URL in our Service Request Configuration view in WC. 
But we cannot get it to work in an AD/LDAP enabled environment.

------------------------------
Patrik Nilsson
------------------------------

#Maximo
#AssetandFacilitiesManagement