Customise ARAS Windows SignOn

Hi, Is it possible to customise single signOn? While Loggin in My windows user is something "7670" i.e Employee#, while in ARAS I have user login called "BAKH" for instance, is it possible if i login with "7670" as a single singOn then it should look into some specified field having value i.e. (Employee#) and login for BAKH?   Regards.
  • Hello, I'm not sure this kind of customization is possible without creating your own custom Windows Authentication DLLs to perform this mapping. We don't have any samples for creating this kind of DLL either. Would it be possible to change the login_name of the User items in Aras to match the name of your Windows Users? The first name and last name of the User could remain the same, and the name of the Alias Identities wouldn't need to change either. Chris
    Christopher Gillis Aras Labs Software Engineer
  • Hi Chris,   Thanks for the reply, If it is not possbile to change the behaviour then i need to go for the alternate solution i.e. at the momnent i have changed user Id to 7670 and four character intials (BAKH) in Employee# field, then i changed keyed name to Employee# so that BAKH is displayed as keyed name at all places, i am investigating now sync service so that it should find user in "Emoployee#" column if not found as "login_name", i'll get back if i stuck somewhere. Thanks again and regards.
  • Hi  Again, could you please explain more about customising Dlls, Is it possible to customise Windows authentication Dlls so that It should look into Employee# field if user is not matching with login_name?   Regards    
  • Hi Again Chris;) I am trying with different possiblities during it i have some finding in database and my question is, There are following stored Procedures available in ARAS 10 SP3 and ARAS 11 SP12 but those are not avaiable in ARAS 11 SP9, Could guide me i can i find those Stored procedures in ARAS 11 SP9?
    1. ValidateUserByLoginNameAndHashedPassword
    2. ValidateUserByLogNameAndPasswordHashLockoutStrategy
      Regards.  
  • Hi BK, It won't be possible to customize the existing Windows Authentication DLLs, and we don't have any samples for creating your own DLLs to accomplish this. I'm not familiar with the stored procedures you mentioned, but they do appear to be absent from the standard SP9 database. They seem to have been re-introduced most recently in 11.0 SP12. It may be possible to manually copy over the stored procedure from an SP12 database into your SP9 database, but I can't confirm that the procedure will work as expected by doing this. Chris
    Christopher Gillis Aras Labs Software Engineer
  • Hi Chris, Thanks for reply, I tried copying the procedure and it didn't help.   We have current ARAS version 11SP9 where these procedures are not there, if I make following changes in bold to these procedure in where condition then it allows me to check if user not found in login_name then check user_no field, I have tested it and it is possible for me achieve the desired output after making changes, could you please check and let me know where can i find these procedures in ARAS 11SP9 or what is the alternative introduced in ARAS 11SP9 for it.
    1. WHERE [LOGON_ENABLED] = @logonEnabled
    AND ([LOGIN_NAME] = @loginName OR [USER_NO] = @loginName) AND [PASSWORD] = @hashedPassword   2.     WHERE u.[LOGON_ENABLED] = @logonEnabled AND (u.[LOGIN_NAME] = @loginName or u.[USER_NO] = @loginName) AND u.[PASSWORD] = @hashedPassword     Regards