System parameters Portal & Organization

authenticationMode

Authentication mode (formerly bean Authentication; the value was adopted automatically during the update).

DB/LDAP/SSO (default: DB)

backupAuthenticationMode

Backup authentication mode: If the primary authentication does not know the user, login is attempted with this mode (e.g. DB with SSO for users who are not in Active Directory). If the value is the same as the primary mode, there is no backup authentication. Formerly bean AuthenticationBackupForSSO, property authenticationMode.

DB/LDAP/SSO (default: DB)

allowPasswordResetByUser

If the parameter is set to true, the user has the "Forgot password?" link available on the login page. The user then receives an e-mail (see PoPasswordResetMail) with a link through which they can set a new password themselves. This parameter only makes sense in combination with authentication mode DB. Formerly bean Authentication.

true/false (default: true)

allowRememberMe

If true, the "stay logged in" option is offered on the login page (see Password criteria and system parameters).

true/false (default: true)

allowMailAdressAsLoginUserName

If true, users can log in with their e-mail address instead of their user name.

true/false (default: true)

useSingleGenericMessageForLoginProblems

If true, the same generic error message is displayed for all login problems (e.g. unknown user, wrong password).

true/false (default: true)

maxNumberOfFailedLoginAttempts

Number of failed login attempts within maxNumberOfSecondsBetweenFailedLoginAttempts seconds after which the user is locked; the user receives an e-mail about this (bean PoLockUserMail). Via "Forgot password?" the user can set a new password and is thereby unlocked again. 0 = no lockout. The system administrator (sadmin) is never locked.

Number (default: 0)

maxNumberOfSecondsBetweenFailedLoginAttempts

Period in seconds in which the failed login attempts are counted for maxNumberOfFailedLoginAttempts.

Number (default: 60)

allow2ndFactorPerUser

If true, users can activate or deactivate two-factor authentication themselves in their security settings. If "Enforce two-factor authentication" is activated for the client, two-factor authentication applies to all users of the client regardless of this parameter.

true/false (default: false)

cutDomain

If the parameter is set to true, the Webdesk user name does not have to include the Windows domain (a user name in the form DOMAIN\user is shortened to user). Formerly bean AuthenticationSSO.

true/false (default: true)

ssoHeaderNameRemoteUser

Name of the HTTP header in which an upstream system passes the Webdesk user name when the authentication mode is SSO. The user is only logged in if the request URL begins with the value of ssoHeaderAuthenticationValidationUrl.

Text (default: X-Remote-User)

ssoHeaderAuthenticationValidationUrl

Beginning of the URL with which the request URL must begin for a login via the header from ssoHeaderNameRemoteUser to take place (e.g. https://personalwolke.at/webdesk3-sso/).

URL (default: empty)

sysAdminPassword

Password of the system administrator (sadmin), stored encrypted. Formerly bean Authentication.

*****

sysAdminPasswordMinLength

Minimum length of the system administrator's password.

Number (default: 12)

sysAdminPasswordRequiresUpperAndLowerCharacters

If true, the system administrator's password must contain uppercase and lowercase letters.

true/false (default: true)

sysAdminPasswordMinNumberOfSpecialChars

Minimum number of special characters in the system administrator's password.

Number (default: 1)

sysAdminCommonName

Displayed name of the system administrator. Formerly bean Authentication.

Full System Administrator

sysAdminEmail

E-mail address of the system administrator; among other things, a warning is sent to it if there are too many failed login attempts with the user sadmin.

E-mail address (default: support@workflow.at)

tlsEnabled

TLS encryption of the LDAP query is activated

true/false (default: false)

ldapUser

LDAP user name

myLdapUser

ldapPassword

LDAP password

*****

ldapProviderUrl

LDAP provider URL

ldap://192.168.1.2

ldapProviderBackupUrl

URL of a second LDAP server that is used if the server from ldapProviderUrl is not reachable.

ldap://192.168.1.3

ldapBaseDn

Base DN of the LDAP query. A list of base DNs can be specified, which are searched in order.

List, e.g. CN=Workflow

ldapSearchSubTree

Should the entire LDAP tree below the base DN be searched?

true/false (default: true)

ldapSearchQuery

Query that uniquely returns objects of type person and contains the binding object; {0} is replaced by the entered user name.

Default: (|(cn={0})(mail={0})(uid={0})(sAMAccountName={0}))

timeToLiveLoginToken

Number of seconds a login token is valid once it is sent to the client.

10

minimalDigitsCount

Required number of digits in the new password. A value in the client's password settings takes precedence.

Number (default: 0)

minimalLength

The minimum length of the new password. A value in the client's password settings takes precedence.

Number (default: 0)

minimalSpecialCharactersCount

Required number of special characters such as "@" or "!" in the new password. A value in the client's password settings takes precedence.

Number (default: 0)

numberOfDifferingLatestPasswords

Minimum number of different passwords before one may be reused. A value in the client's password settings takes precedence.

Number (default: 0)

requiresUpperAndLowerCharacters

If true, both lowercase and uppercase characters must occur in the new password. A value in the client's password settings takes precedence.

true/false (default: false)

validityDays

The number of days after which the password must be changed

Number (default: 30), e.g. 365 for password is valid for 365 days

-1 for passwords that never expire (otherwise the smallest sensible value is 1)

Details: here

resetPasswordTokenValidityInHours

Validity in hours of the link that the user receives by e-mail for setting a new password ("Forgot password?", first login of new persons). A value in the client setting "Reset password token validity (hours)" takes precedence.

Number (default: 24)

forcePasswordChangeAfterReset

If activated, after the administrator resets the password (to the user name or standardResetPassword) the user must change their password at the next login

true/false (default: true)

forcePasswordChangeAfterResetToRandomPassword

Has no effect: When resetting by e-mail, a random password is no longer assigned; the user sets a new password themselves via the link.

true/false (default: false)

standardResetPassword

Default password to which the password is reset if useUsernameAsStandardPassword is set to false

webdesk

useUsernameAsStandardPassword

As an alternative to standardResetPassword, the user name can be used as the default password

true/false (default: true)

explicitRecipient

Recipient of the mail, if the e-mail address stored for the person is not to be used.

E-mail address (default: empty)

senderMailAddress

The mail address to be used as sender

E-mail address (default: office@workflow.at)

subject

Subject of the mail sent to the user when they reset their password

Your webdesk password has been reset

templateBody

Content of the mail sent to the user when they reset their password. The mail no longer contains a password, but a link through which the user sets a new password. The text can contain the Velocity variables $person.xxx (person data) and $resetId; the link must be included in the text, e.g. <Webdesk-URL>/changepassword?resetId=$resetId.

Free text; the default text (English) does not yet contain a link and must be adapted.

personLabelLayout

Velocity expression for the label of a person in selection lists of the administration (e.g. permission control). Replaces the former property personSelectionlistLayout.

e.g. ${fullName} (${orgUnit.shortName}) (default: empty)

groupLabelLayout

Velocity expression for the label of a group in selection lists of the administration.

e.g. ${shortName} (${name}) (default: empty)

personLabelLayout

Velocity expression for the label of a person in user actions.

e.g. ${fullName} (${orgUnit.shortName}) (default: empty)

groupLabelLayout

Velocity expression for the label of a group in user actions.

e.g. ${shortName} (${name}) (default: empty)

debugAjax

Internal parameter for troubleshooting; only change after consulting Workflow.

true/false (default: false)

showZoomNotificationInIE

Notice that appears when the browser has been set to a zoom above 100% (true); the notice is deactivated with "false".

true/false (default: true)

standardDefaultLangCode

Setting of the default language

de

jsErrorHandling

Used to report JavaScript errors more clearly. If true, a JS dialog box is displayed when a JS error is caught.

true/false (default: true)

hideContextMenu

Hides the context menu in general.

true/false (default: false)

allowSkins

Technical parameter with no practical effect: The only skin in use is the Responsive Skin; users can no longer select a skin of their own. During the update to the Responsive Skin the value was set to false; do not change.

true/false (default: false)

defaultSkin

Name of the skin in use. The Classic Skin is no longer supported (even though it is still technically defined); the value must remain "responsive".

responsive (default)

progressOpacityInPercent

Dimming value for the loading process (between 0 and 100) -> 0... no dimming, 100 -> black

Number (default: empty)

pathToWelcomeLogo

A path to a logo can be defined here. Images must always be specified with a leading images. The sitemap forwards the logo to the specified paths

The sitemap forwards the logo, namely to the paths:

custom/resources/images/{1}

resource://at/workflow/webdesk/po/resources/images/{1}

{1} in this case stands for the path that is specified.

pathToStaticPages

No longer used (no effect).

-

headerText

Text formerly displayed for users in the top bar (formerly bean PoOrganisationServiceTarget). No longer displayed in the current user interface (no effect).

PersonalNr: $getEmployeeId$

logoImageFilePath

Path of the image file for the company logo in the header of reports (URL, file path or classpath). A value in the client setting "File path to logo" takes precedence.

Default: at/workflow/webdesk/po/resources/images/workflow_reports_logo.png

logoImageHeight

Height of the company logo in reports. A value in the client setting "Logo height" takes precedence.

e.g. 20mm, 0.5in (default: 18mm)

logoName

Company name for the header of reports. A value in the client setting "Company name" takes precedence.

Text (default: Workflow)

firstAction

Name of the action that is opened automatically when Webdesk starts. If empty, 'po_welcome.act' is opened. The action is only opened if the user is authorized for it (or for a configuration derived from it); the parameter does not apply to the system administrator.

sessionTimeout

Duration of inactivity in minutes after which the session of a logged-in user expires.

Number (default: 1440)

webdeskURL

External address (URL) of Webdesk, e.g. for links in e-mails from jobs that send evaluations. Must be set per system. A value in the client setting "Application URL for SSO/SAML login" takes precedence.

URL, e.g. https://webdesk.yourcompany.at (default: empty)

localeForWeekOfYearAndDayOfWeek

Language code (2-letter ISO 639 code, without country extension) according to which the first week of the year and the first day of the week are determined.

e.g. de, en (default: de)

clusterNodes

List of cluster nodes, used when assigning a job to a cluster node

ClusterNode1

allowUserDeputy

If true, users may define deputies for their roles themselves in their personal settings. A value in the client setting "Allow deputy definition" takes precedence.

true/false (default: false)

allowUserDeputyForXDaysMax

Maximum number of days for which the definition of a deputy in the personal settings may be valid. 0 = no restriction.

Number (default: 0)

allowOnlySingleCostCenterAssignment

When using cost centers (separate org structure), activating the parameter ensures that a user can only ever belong to one cost center. Formerly bean PoOrganisationServiceTarget.

true/false (default: true)

adress

Host name or IP address of the SMTP mail server through which mail can be sent.

asterix.workflow.at

defaultSender

Default sender e-mail address for mails (if none is explicitly specified)

E-mail address (default: webdesk@workflow.at)

password

Password for authentication on the SMTP server.

port

Port for the SMTP server

Number (default: 25)

userName

User name for authentication on the SMTP server; if empty, anonymous authentication to the mail server is assumed.

useStartTls

If true, the connection to the SMTP server is encrypted with STARTTLS.

true/false (default: false)

useSSL

If true, the connection to the SMTP server is established via SSL/TLS.

true/false (default: false)

active

If false, Webdesk sends no e-mails (e.g. on test systems).

true/false (default: true)

active

If false, no jobs are executed on this Webdesk server.

true/false (default: true)

noOfSchedulerThreads

Number of scheduler threads per Webdesk server, i.e. how many jobs can be processed simultaneously. 0 switches off the execution of jobs on this server.

1

actionsToLog

List of actions to be logged. This system parameter is set automatically by the 'Log settings' form. Formerly bean PoLogServiceTarget.

e.g. ta_getOrgAccounts

logAllActions

Should all actions be logged (to the DB logs)? Formerly bean PoLogServiceTarget.

true/false (default: false)

logAllUsers

Should all users be logged (to the DB logs)? Formerly bean PoLogServiceTarget.

true/false (default: false)

usersToLog

List of Webdesk users (user names) to be logged. This system parameter is set automatically by the 'Log settings' form. Formerly bean PoLogServiceTarget.

ABELS

licenceManagerEmail

E-mail address of the license manager. If it is empty, no license notifications are sent.

E-mail address (default: empty)

sendMailToLicenceManagerIfTresholdReached

If true, the license manager (licenceManagerEmail) receives an e-mail when the number of licenses in use exceeds the threshold (tresholdFactor) (at most once in 24 hours).

true/false (default: true)

tresholdFactor

Threshold as a proportion of the licensed number, above which the e-mail is sent to the license manager (0.95 = 95%).

Number (default: 0.95)

loggerName

Name of the logger used for the performance check. If level TRACE is set on this logger, a log entry with a time indication is created when maxMillisBeforeLogging is exceeded

at.workflow.webdesk.performanceLogger

maxMillisBeforeLogging

Time in milliseconds -> if reached, it is logged at log level TRACE. The property treshold previously documented here no longer exists.

50

minToLive

Internal parameter: validity (in minutes) of internal edit locks that are no longer refreshed. Only change after consulting Workflow.

3

Authentication.sysAdminUser

Removed. This system parameter no longer exists. The user name of the system administrator is fixed as "sadmin".

AuthenticationLDAP.ldapUserNameField

Removed. This system parameter no longer exists. Which LDAP fields are used to search for the user is determined via ldapSearchQuery.

GlobalUserLayoutOptions.acceptCaptionLayoutProblemInIE

Removed. This system parameter no longer exists.

GlobalUserLayoutOptions.forcelFullAjax

Removed. This system parameter no longer exists.

PoCacheHibernateUtils.forceReload

Removed. This system parameter no longer exists.

PoMenuServiceTarget.extractPermissionBeforeHand

Removed. This system parameter no longer exists (the bean PoMenuServiceTarget was removed).

PoMenuServiceTarget.resolveViewPermissionsBeforeHand

Removed. This system parameter no longer exists (the bean PoMenuServiceTarget was removed).

PoOptions.skins

Removed. This system parameter no longer exists. The skin in use is determined via defaultSkin.

PoSystemMessageTarget.daysToLive

Removed. This system parameter no longer exists.

ServerParamList.elements

Removed. This system parameter no longer exists in the PO module. The connection parameters for the groupware system are configured in the GW module.

PoUtilServiceTarget.timeToLiveLoginToken

Removed. This system parameter no longer exists. The validity of login tokens is determined via LoginTokenUtils.timeToLiveLoginToken.

StartupListener.firstStartupBeanName

Removed. This system parameter no longer exists.