This paid feature allows to use external identity providers for the authentication of users in the formcycle administration interface or in formcycle forms.

A login service in formcycle is the configuration of the connection to an external identity provider. Login services can be created in formcycle as a client or system login service. For this purpose, the login service must be configured in the user administration of a client or in the user administration of the system. If certain login services should be available on all clients available in the system, they should be configured in the system settings. The differences between client and system login services are explained here.

Contents

Creating a new login service

By clicking on the + button in the upper left corner, a new login service can be created. First, a series of buttons appear which determine the type of login service or identity provider. The following types of Identity Providers are available for selection:

• OpenID Connect
• SAML 2.0
• OAuth 2
• Facebook
• Google
• Microsoft Entra ID
• LDAP
• Kerberos (only available as client login servcice)
• installed plugin login services

Base settings

The basic settings of all login services are the same except for the Kerberos login service in the system settings.

Name

Name of the login service in formcycle.

Different name on form login button

If a form has been configured so that several authentication options are available, a dialog is displayed when the form is opened in which an authentication type must be selected. Here you can specify which text content should be on the button for this login service.
If nothing is entered at this point, the entered name will be used.

Alias for callback URL (UUID)

Unique identifier used by the identity provider when returning to formcycle. This value is generated automatically, but can be changed if needed.

Do not send welcome mail 8.1.0

By default, a welcome message is sent to the user when they first login. Enable this option to omit this email.

Automatically verify the user's email address 8.1.0

By default, an email is sent to the user, prompting them to verify their email address. Enable this option to verify the email address automatically. Only enable this option if you trust the identity provider to provide valid email addresses.

Available for all clients 8.1.0

This option is only available for system login services. If activated, the login service is available for all clients. If deactivated, you can specify in which clients the login service should be available. If no client is selected, the login service can only be selected in the backend.  If the use is limited to certain clients, then the login service for user filters or form access can only be used in the selected clients.

Type of callback URL

Determines the form of the callback URL.

• (Recommended) Callback URL without parameters uses the callback UUID in the path of the URL.
• Callback URL with parameter uses the callback UUID as URL parameter.

The callback URL of the login service is updated when changes are made and can be viewed via the Callback URL item.

Callback URL

The URL used when returning from the identity provider to formcycle is displayed here and can be copied to the clipboard using the copy button to the right of the URL. If frontend servers are available, the corresponding URL is also displayed for those.

Window width

Specifies the width of the window that redirects users to the identity provider and opens on login.

Window height

Specifies the height of the window that redirects users to the identity provider and opens on login.

Initially visible buttons

Under the basic settings, there are initially 2 buttons whose functions should help with the configuration of the login service.

Help

Opens the formcycle help in the browser.

Add configuration

If the required information has been provided by the identity provider, the area for configuring the login service can be opened by clicking on this button. The configuration area opens, which depends on the type of login service / connected identity provider. The individual options for configuring these login services are described in detail on the linked subpages.

Testing Login srevices

Login services can be tested with a user login by clicking the "Test login service" button. After clicking the button, there is a prompt to enter a user login. After successful login, the user's profile information is displayed in JSON form.

Deleting existing login services

After an entry has been selected in the list of login services, it is deleted by pressing the trash can button and confirming a dialog.

Using data logged in users in forms

The user data returned during registration can also be used to fill in form fields, among other things. For this purpose, the placeholders [%$USER%], [%$LAST_USER%] and [%$INITIAL_USER%] can be set as values in form elements. Alternatively, this data can be accessed via JavaScript using the XFC_METADATA object XFC_METADATA.user.

Use the login service to log in to formcycle

Note: Cloud customers do not have access to the system settings at the moment. Therefore, please contact Support if you wish to make changes to the login page.

In that case, you need to configure the desired services under System settings > User settings > Login screen in order to be able to use the created login services to log in to formcycle.