AD integration: display name

Ajit_Londhe · February 19, 2021, 11:50pm

Hi all,

When using AD authentication, is it normal for the login name at the top right to show my “displayName” but then overwrite it with my “sAMAccountName” value in the sec_user table and show that for the concept set / cohort definition author?

@Konstantin_Yaroshove

Thanks,
Ajit

Konstantin_Yaroshove · February 22, 2021, 8:29am

Hi @Ajit_Londhe

Yes, “sAMAccountName” is used for sec_user table records. If you would like to adjust displayed name, you can configure securtity.ad.userMapping.displayNameAttr option for wished value from AD.

github.com

OHDSI/WebAPI/blob/master/pom.xml#L122


<security.ad.url></security.ad.url>
<security.ad.searchBase>CN=Users,DC=example,DC=org</security.ad.searchBase>
<security.ad.principalSuffix>@example.org</security.ad.principalSuffix>
<security.ad.system.username></security.ad.system.username>
<security.ad.system.password></security.ad.system.password>
<security.ad.searchFilter>(&amp;(objectClass=person)(cn=%s))</security.ad.searchFilter>
<security.ad.ignore.partial.result.exception>true</security.ad.ignore.partial.result.exception>
<security.ad.result.count.limit>30000</security.ad.result.count.limit> <!-- 0 means no limit -->
<security.ad.default.import.group>public</security.ad.default.import.group>
<security.ad.searchString>(&amp;(objectClass=person)(userPrincipalName=%s))</security.ad.searchString>
<security.ad.userMapping.displaynameAttr>displayname</security.ad.userMapping.displaynameAttr>
<security.ad.userMapping.firstnameAttr>givenname</security.ad.userMapping.firstnameAttr>
<security.ad.userMapping.middlenameAttr>initials</security.ad.userMapping.middlenameAttr>
<security.ad.userMapping.lastnameAttr>sn</security.ad.userMapping.lastnameAttr>
<security.ad.userMapping.usernameAttr>cn</security.ad.userMapping.usernameAttr>


<security.cas.loginUrl></security.cas.loginUrl>
<security.cas.callbackUrl></security.cas.callbackUrl>
<security.cas.serverUrl></security.cas.serverUrl>
<security.cas.cassvcs></security.cas.cassvcs>
<security.cas.casticket>casticket</security.cas.casticket>

Ajit_Londhe · February 22, 2021, 3:27pm

Hmm, I do have that already in my settings xml file. And it does use it, as in the screenshot in the logged in name in the top right of the screen. But the Atlas assets like concept sets and cohort definitions do not use this value.

When debugging, I observe that I log in, the sec_user table has “Londhe, Ajit” for the name value. When I go to create a concept set, it is overwritten to “alondhe.” I think in the workflow of asset creation, there isn’t a step to try to resolve the display name.

Ajit_Londhe · February 22, 2021, 6:13pm

Anyone interested in this issue, follow along here: