BizDoc.Core.DirectoryServices 6.7.9

Directory Services for BizDoc

Configure

IIS

Install and enable Window Authentication on IIS.

Setup web.config:

<system.web>
    <authentication mode="Windows" />
    <roleManager enabled="true" defaultProvider="AspNetWindowsTokenRoleProvider" />
</system.web>

Web App

In program.cs

builder.Services.AddBizDoc().
	AddDirectoryServices();

app.UseBizDoc().UseDirectoryServices();

By default, BizDoc uses Windows principal Sid as user identity. Set the IdentityType on the AddDirectoryServices options to override this behavior.

Set IdentityClaimType on AddBizDoc options to require BizDoc to use that pattern when authenticating user.

To list only users of a a domain group, set the UserGroupName option:

AddDirectoryServices(options => {
}, configure => {
});

Choose one of two patterns:

Employee Identity

builder.Service.AddBizDoc(options => {
    options.IdentityClaimType = DirectoryServicesClaims.EmployeeIdClaimType;
}).
AddDirectoryServices(options => {
}, configure => configure.UseEmployeeIdentityProvider());

SId

builder.Service.AddBizDoc(options => {
}).
AddDirectoryServices(options => {
}, configure => configure.UseIdentityTypeProvider());

BizDoc system privileges

Users who need to access BizDoc as administrators should have a dedicated domain group. Set the SystemGroupName option.

AddDirectoryServices(options => {
    SystemGroupName = "group-sid-here";
});

See Get-ADGroup on how to get the SID of a group.

You can set the SystemRole as an alternative to one of Windows built-in roles, such as machine administrator.

Angular

In /ClientApp

npm i @bizdoc/windows

In app.module.ts

@NgModule({
    imports: [
        BizDocModule.forRoot({}),
        WindowsModule.forRoot()
    ]
})