Webclient Core Configuration

The core webclient configuration is stored in YAML format. For CIB seven Tomcat or WildFly distributions, the configuration is typically located in the application.yaml file. For CIB seven Run distribution, the webclient configuration can be combined with the distribution configuration files.

Authentication

Authentication means verifying a user’s identity against the CIB seven webclient.

A user authenticates on the login page by providing a username and password. If the authentication is successful, the user gets access to the webclient and can work on tasks in Tasklist or perform operations in Cockpit, for example.

The authentication information consists of the following:

• Process engine name
• Username
• Group memberships
• Tenant memberships

The CIB seven webclient correlate the authentication information against authorizations to determine what data the user can query for and which operations the user can perform. There are several options to configure authentication in CIB seven, see cibseven.webclient.authentication.

LDAP

If you connect CIB seven with the LDAP identity service, you have read-only access to the users and groups. Create new users and groups via the LDAP system, but not in the admin application. Find more information about how to configure the process engine in order to use the LDAP identity service here. Options to configure CIB seven webclient with LDAP support: cibseven.webclient.ldap.

Multi-engine support

CIB seven webclient supports connections to multiple engine REST. The multi-engine feature allows using a single webclient instance to view and manage multiple CIB seven engines. This is particularly useful for developers or administrators who need to switch quickly between environments such as testing, development or production. Additional engines can be optionally specified via the additionalEngineRest sub-property:

cibseven:
  webclient:
    engineRest:
      url: http://localhost:8080
      path: /engine-rest
      displayName: Local Server
      tooltip: Local environment
      additionalEngineRest:
        - url: https://dev.cibseven.de/
          path: /engine-rest
          displayName: Dev Server
          tooltip: Development environment
          jwtSecret: <SECRET_OF_THE_ADDITINAL_ENGINE>
        - url: https://qa.cibseven.de/
          path: /engine-rest
          displayName: QA Server
          tooltip: QA environment
          jwtSecret: <SECRET_OF_THE_ADDITINAL_ENGINE>

After configuring, an icon with additional engines should appear at the top menu of the CIB seven webclient.

All Core Configuration Options

The table below lists the core webclient options with short descriptions. The properties that set the paths under which the webclient is deployed in CIB seven Run or a Spring Boot application are described in CIB seven webclient properties.