Árvore de páginas

Index 



Speaking of system settings ...

This feature allows you to set the basic settings for the use of the platform.

You can set information on notifications, integrated authentication, viewing customization on the platform, use of a digital signature in documents, among others.



Manage system settings


01. Access the platform as the user wcmadmin.

02. In the main menu, click Control panel.

03. Press the WCM container.

04. Click System settings.

05. Add the required information in the tab Portal.

Required information:

Protocol: HTTP or HTTPS.

Tip!

Read the platform’s HTTPS Configuration documentation to check the procedure required to switch from HTTP protocol to HTTPS.

Domain
Base URL from which to access the platform.

Port 
Platform access port. The default port is 443.

"HttpOnly" and "Secure" flags in cookies
In order to prevent attacks, such as cookie theft, you can enable the "HttpOnly" and "Secure" flags on some cookies generated by the Fluig Platform.
This helps minimize these attacks by preventing access to the cookie value using JavaScript.
This option is automatically enabled when you select HTTPS under Protocol. In addition, prevention also works regardless of the configuration of HTTPS (Nginx, Apache or TOTVS Fluig Platform).

The following is the list of cookies that allow the use of enabled flags:

  • JSESSIONID
  • JSESSIONIDSSO
  • jwt.token
  • mobile_redirected
  • WCMUserLang (this cookie will only be created when the language is changed)

As soon as new cookies receive these flags, the list will be updated.

Default theme
Default theme selected for creating new companies (tenant).

06. Click on the Authentication tab and set the required information.

Required information:

Enable integrated authentication
When checked, it determines that the integration with the Windows operating system is active, that is, it allows the users registered in the Active Directory – directory deployment service that stores object data in computer networks and provides it to users – to access the platform without manually entering their access data on the login screen, provided that such users have been previously authenticated in Windows.

Authentication script URL
IIS (Internet Information Services) server URL - where the remote authentication script will run. This field is enabled only when the option "Enable integrated authentication" is checked.

Authentication token
Token used to validate the integrity and security of integrated authentication requests. To generate a new token, press Generate new token on the right side of the field. This field is enabled only when the option "Enable integrated authentication" is checked.

AD server address
Active Directory server address in the following format: [Server]:[port]. This field is enabled only when the option "Enable integrated authentication" is checked.

Base DN
Base DN (Distinguished Name) to be used to add under which entry in Active Directory users for integrated authentication will be searched and validated. This field is enabled only when the option "Enable integrated authentication" is checked.

Domain user
Active Directory user that has enough privileges to read information on other users in the Active Directory. This field is enabled only when the option "Enable integrated authentication" is checked.

Password
Domain user password. This field is enabled only when the option "Enable integrated authentication" is checked.

07. Click the tab Thumbnail and add the path to FFmpeg executable file, which is the application responsible for generating small versions of images and videos on the platform in order to make it easier to view and recognize that type of content.

FFmpeg must be installed in the platform server to generate thumbnails. Go to Configure and enable Thumbnails for more information on how to obtain FFmpeg and the required version.

08. Click on the Customization tab and add the required information.

Required information:

Logo image URL (login page)
Logo image URL to be displayed on the login page on the Web platform.

Logo image URL (mobile login page)
Logo image URL to be displayed on the login page on the platform’s mobile application.

URL for Mobile rerouting
Page URL that is displayed when a user accesses the platform via a mobile browser and tells them that they can download its mobile application to access its features optimally. 

09. Click on the Platform parameters tab and add the required information.

Required information:

GENERAL SETTINGS


Block Clickjacking
When enabled, prevents clickjacking attacks from being carried out in the platform. Clickjacking attacks are accomplished by adding a page within another one via an iframe element on an HTML page and intercepting mouse and keyboard events, that is why this feature is enabled by default. After enabling the feature, ON is displayed, indicating that the feature is active. When that feature is disabled, OFF is displayed.

It is not recommended to disable this option, so only change this parameter if you are aware of the vulnerability risks.


E-MAIL SETTINGS


Anything that is configured as global will be applied to all companies registered on the platform, except for those that have individual settings. Follow the fill instructions according to the Global configuration item on the Platform | E-mail sending configuration page.


OPENOFFICE SETTINGS


Enable OpenOffice
When enabled, allows use of Controlled Copy. After enabling the feature, ON is displayed, indicating that the feature is active. When that feature is disabled, OFF is displayed.
OpenOffice Directory
Directory where Open Office is.
OpenOffice ports
List of Open Office ports separated by comma.


LICENSE SERVER


Enable License Server
When enabled, allows operating the platform using the licenses managed by the License Server. After enabling the feature, ON is displayed, indicating that the feature is active. When that feature is disabled, OFF is displayed.
LS host
License Server address.
License server port
Port used by the License Server.


REALTIME


URL for receiving notifications
URL used for receiving notifications from the platform.
Internal URL for sending notifications
Internal URL used for sending notifications from the platform.


INDEXATION


Solr directory
Directory where Solr is.
URL to access Solr
URL used to access Solr.
Solr on a Remote Server
When enabled, the use of Solr on a separate server is active. After enabling the feature, ON is displayed, indicating that the feature is active. When that feature is disabled, OFF is displayed.
Solr in cluster
When enabled, the use of Solr in cluster is active. After you enable the feature, ON is displayed, indicating that the feature is active. When that feature is disabled, OFF is displayed.


FTP


Enable FTP Server
When enabled, allows using the FTP server. After enabling the feature, ON is displayed, indicating that the feature is active. When that feature is disabled, OFF is displayed.
FTP port
FTP port used for posting documents.
FTP port range
Ports range used by FTP for posting and posting in private folders.
FTP port for private folders
Port used by FTP for posting in private folders.
FTP port range for private folders
Define the range of the ports used for passive FTP communication.

10. Click Save.



Export authentication script


01. After you save the information entered for integrated authentication, click Export, in the lower right corner of the tab Authentication.

The remote authentication script should be published on the IIS server. 



Edit system settings


01. Access the platform as the user wcmadmin.

02. In the main menu, click Control panel.

03. Press the WCM container.

04. Click System settings.

05. Change the information of your choice.

Once you change some parameters, restart the service platform. 

06. Click Save.



Please note!

This documentation is valid from the Crystal Lake (1.7.1) update. If you use a previous update, it may contain information different from what you see on your platform.