FME Version
Question
In FME Flow 2022.0+ support has been added for SAML configuration. When enabled, FME Flow authorization is routed through your organization's SAML identity provider where multi-factor authentication can be enforced. How can I make use of FME Flow transformers* in FME Form using a SAML user account?
*FME Flow transformers refers to the following transformers collectively:
FMEFlowJobSubmitter
FMEFlowNotifier
FMEFlowResourceConnector
FMEFlowJobWaiter
FMEFlowLogFileRetriever
Answer
FME Flow transformers are transformers available from FME Form that can be integrated into a workflow to perform a certain action on FME Flow. They require an FME Flow Web Connection to run. Unlike traditional system or directory server user accounts, SAML is not a ‘headless’ authentication method, that is, it requires user input at runtime. As a result, FME Flow transformers cannot make use of SAML authentication. Instead, a couple of alternative methods to using these transformers are listed below.
Note: This information only applies to FME Flow transformers. Logging in using SAML is supported in the Publish/Download to/from FME Flow wizards from FME Workbench.
Use a System Account
FME Server can consist of both SAML and system user accounts. Consider creating a system user account whose credentials can be shared with those users who author workspaces in FME Form. This account can be used to create the web connection for FME Flow transformers.
Use FME Flow Automations
The FME Flow Automations framework intends to provide equivalent, if not more powerful functionality as FME Flow transformers. Consider migrating existing workflows that contain these transformers to Automations, and going forward create Automations as opposed to leveraging FME Flow transformers in your workspaces.
If you encounter a scenario in which you cannot get the equivalent functionality from FME Flow Automations please contact Safe Software Support with details of your use case.
Comments
0 comments
Please sign in to leave a comment.