BizDoc.Authentication.DirectoryServices 6.8.14

Directory Services for BizDoc

Configure

IIS

Install and enable Window Authentication.

Configure app web.config:

<system.web>
    <authentication mode="Windows" />
    <roleManager enabled="true" defaultProvider="AspNetWindowsTokenRoleProvider" />
</system.web>

Application pool identity. File system read / write to /Profiles and administrator write to bizdoc.json file(s) and /Backups.

Integrate

In program.cs

builder.Services.AddBizDoc().
	AddDirectoryServices();

app.UseBizDoc().UseDirectoryServices();

To list only users of a a domain group, set the UserGroupName option:

AddDirectoryServices(options => {
    options.UserGroupName = "users-group-here";
});

See Get-ADGroup on how to get the SID of a group.

builder.Service.AddBizDoc(options => {
}).
AddDirectoryServices(options => {
}, configure => configure.UseIdentityTypeProvider());

By default, BizDoc uses Windows principal Sid as user identity. Provide an IdentityClaimType to AddBizDoc options to require BizDoc to use a different property.

builder.Service.AddBizDoc(options => {
    options.IdentityClaimType = ClaimTypes.X500DistinguishedName;
});

Available claims:

BizDoc system privileges

Users who need to access BizDoc as administrators should have a dedicated domain group. Set the SystemGroupName option.

AddDirectoryServices(options => {
    SystemGroupName = "group-sid-here";
});

See Get-ADGroup on how to get the SID of a group.

You can set the SystemRole as an alternative to one of Windows built-in roles, such as machine administrator.

Components

OrganizationUnits, Groups and Departments type.

Widgets

Staff Pending.

Staff Performance.

Departments Performance.

Groups Performance.

Rules

Document Owner Groups.

Attribute

Owner Department - Departments. Custom Attribute.

Workflow

Direct Manager.

Angular

In /ClientApp

npm i @bizdoc/windows

In app.module.ts

@NgModule({
    imports: [
        BizDocModule.forRoot({}),
        WindowsModule.forRoot()
    ]
})