infor cloudsuite corporate, healthcare, public sector multi-tenant … · 2020-04-20 · • infor...

Infor CloudSuite Corporate,Healthcare, Public SectorMulti-tenant Configuration Guide

Release 11.0.x

Copyright © 2020 Infor

Important Notices

The material contained in this publication (including any supplementary information) constitutes andcontains confidential and proprietary information of Infor.

By gaining access to the attached, you acknowledge and agree that the material (including anymodification, translation or adaptation of the material) and all copyright, trade secrets and all otherright, title and interest therein, are the sole property of Infor and that you shall not gain right, title orinterest in the material (including any modification, translation or adaptation of the material) by virtueof your review thereof other than the non-exclusive right to use the material solely in connection withand the furtherance of your license and use of software made available to your company from Inforpursuant to a separate agreement, the terms of which separate agreement shall govern your use ofthis material and all supplemental related materials ("Purpose").

In addition, by accessing the enclosed material, you acknowledge and agree that you are required tomaintain such material in strict confidence and that your use of such material is limited to the Purposedescribed above. Although Infor has taken due care to ensure that the material included in this publicationis accurate and complete, Infor cannot warrant that the information contained in this publication iscomplete, does not contain typographical or other errors, or will meet your specific requirements. Assuch, Infor does not assume and hereby disclaims all liability, consequential or otherwise, for any lossor damage to any person or entity which is caused by or relates to errors or omissions in this publication(including any supplementary information), whether such errors or omissions result from negligence,accident or any other cause.

Without limitation, U.S. export control laws and other applicable export and import laws govern youruse of this material and you will neither export or re-export, directly or indirectly, this material nor anyrelated materials or supplemental information in violation of such laws, or use such materials for anypurpose prohibited by such laws.

Trademark Acknowledgements

The word and design marks set forth herein are trademarks and/or registered trademarks of Infor and/orrelated affiliates and subsidiaries. All rights reserved. All other company, product, trade or servicenames referenced may be registered trademarks or trademarks of their respective owners.

Publication Information

Release: Infor CloudSuite Corporate Infor CloudSuite Healthcare Infor CloudSuite Public Sector 11.0.x

Publication Date: September 15, 2020Document code: csstlwsn_11.0.x_cslwsncg__en-us

Contents

Contacting Infor..................................................................................................................................9

Part I: Overview.................................................................................................................................10

Chapter 1: Overview........................................................................................................................11

Products included in this CloudSuite (version 11.0.0.0)..............................................................11

Reference architectural diagram..................................................................................................12

Configuration overview.................................................................................................................12

Configuration checklist.................................................................................................................12

Part II: Complete these tasks first...................................................................................................15

Chapter 2: Complete these tasks first.............................................................................................16

Verify the initial customer administrative user..............................................................................16

Set up the trust between the multi-tenant CloudSuite and your SAML provider..........................16

Setting up additional environments on a single Cloud Server.....................................................16

Verify availability of client applications.........................................................................................17

Verify that applications have been created..................................................................................17

Verify trusted sites in your browser..............................................................................................18

Setting up compatibility for Internet Explorer browsers................................................................18

ION Connector setup tasks..........................................................................................................18

Complete other Infor Ming.le setup tasks not covered in this document......................................18

Send Landmark key information to your Infor CloudOps team....................................................19

Add the What's New widget to the home page............................................................................19

Chapter 3: View and update custom parameters............................................................................20

View custom parameters for home pages....................................................................................20

HROrganization custom parameter..............................................................................................20

Configuring a system user for OpenAPI documentation..............................................................21

Create the Configuration Parameter records in Infor Global HR..................................................21

Create the Configuration Parameter records in Infor CloudSuite Financials & Supply

Management................................................................................................................................23

Infor CloudSuite Corporate, Healthcare, Public Sector Multi-tenant Configuration Guide | 3

Contents

Chapter 4: Optional: Make Email not required for user records......................................................25

Optional configuration per customer request: Make Email not required for user records............25

Request CloudOps to make a configuration change in Infor Ming.le...........................................26

Create and set the userbodconfig configuration parameter in Landmark to make Email not

required........................................................................................................................................26

Request CloudOps to perform LSF configuration for Email not required.....................................27

Part III: Preliminary user setup procedures...................................................................................28

Chapter 5: Configuring user BODs in a multi-tenant system...........................................................29

User BODs: Overview..................................................................................................................29

When are user roles sent as batch jobs?.................................................................................29

Configuring Draft Mode for adding users in Infor Ming.le.............................................................30

Attaching the user BOD documents for a multi-tenant CloudSuite..............................................30

Creating the document flow for user BODS in a multi-tenant CloudSuite....................................31

Mass synchronization of roles and users.....................................................................................33

Verifying status of Async ION queues......................................................................................33

Mass-synchronizing Landmark roles to Infor Ming.le/IFS.........................................................33

Verify logical IDs of roles added through BODs...........................................................................33

Performing a smoke test for multi-tenant Landmark....................................................................34

Chapter 6: Additional user setup procedures..................................................................................35

Creating enterprise structures and loading employee data: Overview........................................35

Updating and creating administrative users and default roles.....................................................36

Updating the initial user............................................................................................................36

Create a new administrative user account in IFS (optional).....................................................36

Setting roles to be automatically assigned to all new users in Infor Ming.le.............................37

Recommended default roles.....................................................................................................37

Infor Landmark roles for administrative users...........................................................................37

Part IV: Tenant setup........................................................................................................................39

Chapter 7: SFTP / SMTP Setup......................................................................................................40

Configuring Administration Console for internal communication.................................................40

Log into the internal FTS server...............................................................................................40

Set up SFTP for Electronic Payment............................................................................................41

Configure SMTP email setup for Notifications.............................................................................42

Perform multi-tenant configuration for tenants using Infor Human Resource Management

(hybrid configuration)...................................................................................................................42


Contents

Verify that you have received the File Transfer Server (STS) credentials from your Infor

CloudOps team.........................................................................................................................43

Configure the FTS channel with tenant-specific information....................................................43

Update the main configuration set............................................................................................43

Activate receivers.....................................................................................................................44

Chapter 8: Configure Infor Global Resources content and Infor HCM integrated products

(pillars).............................................................................................................................................45

Configure Global Human Resources content..............................................................................45

Create the ConfigurationParameter records.............................................................................45

Create the actor........................................................................................................................48

Create the identity....................................................................................................................48

Create the identity-actor link.....................................................................................................49

Assign the role..........................................................................................................................49

Configure integration for HCM associated products....................................................................49

HCM associated product checklist...........................................................................................50

Configure Global Human Resources........................................................................................50

Configure Infor Human Resource Management (HRM)...........................................................52

Configure Infor Human Resources Service Delivery (HRSD)..................................................55

Configure Infor Learning Management System (LMS).............................................................59

Configure Infor Talent Science (TS)..........................................................................................65

Post-orchestration tasks...............................................................................................................75

Configure Symmetry to work with Talent Science....................................................................75

Part V: User / employee provisioning.............................................................................................77

Chapter 9: General information.......................................................................................................78

Data privacy conventions.............................................................................................................78

Terminology used in this section..................................................................................................78

Best practices for adding users/employees..................................................................................78

Chapter 10: Mass-loading information for existing users / employees............................................80

Importing users into Infor OS CE.................................................................................................80

CSV import file details..............................................................................................................81

Mass loading actor context records using Infor Spreadsheet Designer.......................................81

Querying context property records...........................................................................................82

Uploading actor context records...............................................................................................83

Mass linking actor/agent records in Infor Global HR/TM..............................................................83


Contents

Assign roles to CloudSuite Financials and Supply Management application page and context

/ utility apps..................................................................................................................................84

Assign permission to the application page...............................................................................84

Assign permission to context / utility apps................................................................................84

Troubleshooting user provisioning issues....................................................................................85

Launching ION to view status of user BODs............................................................................85

Troubleshooting outbound user BODs......................................................................................85

Troubleshooting inbound user BODs........................................................................................88

LSF and Landmark customers: Additional user provisioning steps.............................................90

Chapter 11: Configuring user/employee provisioning through Global HR.......................................91

GHR user / employee provisioning configuration.........................................................................91

Configure user provisioning information for automation...............................................................92

Setting up position roles...............................................................................................................93

Viewing pending user / employee provisioning records...............................................................93

Resources....................................................................................................................................93

Creating relationships to the organization....................................................................................94

Creating relationship statuses......................................................................................................95

Chapter 12: Adding new users / employees individually through Global HR..................................97

Use Global HR to add new users/employees..............................................................................97

Creating a single user/employee in Global HR............................................................................97

Verifying and completing the new hire request..........................................................................105

Import employees into Infor Global HR......................................................................................105

Creating the data load file.......................................................................................................106

Loading the employee data into a staging table.....................................................................106

Loading employee records into Infor Global HR.....................................................................106

Single-tenant Lawson System Foundation additions: Add required identities for new

employee/user records...............................................................................................................107

Option 1: Submit a CSP ticket to load identities.....................................................................108

Option 2: Update the user records through the Infor Security desktop tool............................109

Option 3: Engage professional services.................................................................................109

Chapter 13: Adding new users individually through Infor CloudSuite Financials & Supply

Management.................................................................................................................................110

Creating a new FSM user using the Infor Rich Client wizard.....................................................110

Creating a new FSM user using Infor OS CE............................................................................111

Creating GHR Employees for CloudSuite Financials & Supply Management............................112


Contents

Manually creating an employee without using the Hire Action...............................................112

Manually adding actor context records and linking agents.....................................................113

Chapter 14: d/EPM Platform FSM users and roles.......................................................................114

Updating the d/EPM Platform FSM content package................................................................114

Users and roles in d/EPM Platform: Overview...........................................................................114

d/EPM Platform user provisioning prerequisites.....................................................................115

Creating a d/EPM Platform administrator role (optional)...........................................................115

Registering IFS users and user groups with d/EPM Platform....................................................116

Viewing user and user groups assignments for d/EPM Platform...............................................116

Creating custom d/EPM Platform application roles....................................................................117

Assigning d/EPM Platform application roles to users................................................................117

Enabling drillback in d/EPM Platform FSM................................................................................118

Chapter 15: d/EPM Platform MSCM users and roles....................................................................119

d/EPM Platform MSCM user provisioning prerequisites............................................................119

Creating a d/EPM Platform administrator role...........................................................................120

Viewing user and user groups assignments for d/EPM Platform MSCM...................................120

Creating custom d/EPM Platform MSCM application roles........................................................120

Assigning d/EPM Platform MSCM application roles to users....................................................121

Part VI: Other integrations.............................................................................................................122

Chapter 16: Perform additional product configuration...................................................................123

Global Financial Controller (GFC) integration............................................................................123

Verify that the tenant is ready for GFC post-provisioning.......................................................123

Working with the GFC-to-Infor Ming.le connection points and document flows.....................123

Activate the poller...................................................................................................................125

Infor Document Capture (IDC) integration.................................................................................125

Infor Document Capture Overview.........................................................................................125

Required knowledge...............................................................................................................127

Integrating IDC with the FSM application...............................................................................127

Infor Document Management (IDM) integration.........................................................................129

Verify that authentication to the IDM server has been configured..........................................129

Use toggles to update IDM attributes.....................................................................................130

Test the connection.................................................................................................................130

IDM printing services..............................................................................................................131

Infor Coleman Digital Assistant integration................................................................................132

Assigning roles.......................................................................................................................133


Contents

Configuring Infor CloudSuite Financials and Supply Management skills...............................134

Perform product integrations for products not included in this section.......................................134

Part VII: Additional information.....................................................................................................135

Chapter 17: Product URLs............................................................................................................136

Valid URLs for Global HR for multi-tenant clients.......................................................................136

Valid URLs for multi-tenant clients.............................................................................................137


Contents

Contacting Infor

If you have questions about Infor products, go to Infor Concierge at https://concierge.infor.com/ andcreate a support incident.

The latest documentation is available from docs.infor.com or from the Infor Support Portal. To accessdocumentation on the Infor Support Portal, select Search > Browse Documentation. We recommendthat you check this portal periodically for updated documentation.

If you have comments about Infor documentation, contact [email protected].


Contacting Infor

https://concierge.infor.com/

https://docs.infor.com/

mailto:[email protected]

Part I: Overview


Overview

Chapter 1: Overview

Products included in this CloudSuite (version 11.0.0.0)Infor CloudSuite Corporate, Healthcare, Public Sector, version 11.0.0.0 are large groups of productstargeted to specific industries.

The reference architectural diagram in this section shows the products that are included in or availableas an option to each CloudSuite.

Details about the included products can be found in these documents.

• Infor CloudSuite Corporate Solution Overview, Release 11.0.0.0• Infor CloudSuite Healthcare Solution Overview, Release 11.0.0.0• Infor CloudSuite Public Sector Solution Overview, Release 11.0.0.0

Details about technical requirements for this CloudSuite including compatible third-party and Infordesktop tools can be found in these documents.

• Infor CloudSuite Corporate Technical Requirements, Release 11.0.0.0• Infor CloudSuite Healthcare Technical Requirements, Release 11.0.0.0• Infor CloudSuite Public Sector Technical Requirements, Release 11.0.0.0

All documents are available on docs.infor.com.


Overview

Reference architectural diagram

Configuration overviewIn general, the configuration tasks in this guide do not need to be performed in the order describedhere and can be performed simultaneously. For example, you can mass-load users while you arein-progress with configuring an SMTP server.

There some exceptions. For example, Infor recommends that you perform the verification steps in the"Complete these tasks first" section of this document before you perform any other steps. In addition,user BOD setup must be performed before other user provisioning steps.

Use the "Configuration checklist" in this section for guidance.

Configuration checklistFollow this checklist to determine if you need to perform a specific task, when it needs to be done andwhere to find more information.


Overview

ReferenceWhen to performRequiredTaskComplete

Verify the initialcustomer adminis-trative user onpage 16

Immediately uponhand-off of thetenant fromCloudOps.

YesVerify the initialcustomer adminis-trative user bycontacting the re-cipient of theemail addressand verifying cre-dentials.

□

Configuration de-tails are in InforCloudSuite Multi-Tenant Configura-tion Guide avail-able on InforXtreme. Multi-envi-ronment detailsare in this docu-ment. Setting upadditional environ-ments on a singleCloud Server onpage 16

Early in the config-uration process.

YesSetting up thetrust between theMT CloudSuiteand the SAMLProvider

□

Verify that applica-tions have beencreated on page17

As early as possi-ble after tenanthand-off from In-for CloudOps.

YesVerify that applica-tions have beencreated

□

Setting up compat-ibility for InternetExplorer browserson page 18

Prior to any config-uration or usertasks that requirebrowser use.

Yes for InternetExplorer usersonly

Set up compatibil-ity for Internet Ex-plorer

□

Send Landmarkkey information toyour InforCloudOps teamon page 19

As early in theconfiguration pro-cess as possible.

YesSend Landmarkkey information toyour InforCloudOps team

□

Configuring userBODs in a multi-tenant system onpage 29

As early in theconfiguration pro-cess as possibleand prior to anyuser provisioningtasks, includingconfiguring HCMpillars (if HumanCapital Manage-ment is used).

YesConfigure userBODs

□


Overview

ReferenceWhen to performRequiredTaskComplete

Create a new ad-ministrative useraccount in IFS(optional) on page36

Any time but, ifyou want the addi-tional users toperform adminis-trative tasks, theymust be added atthe appropriatetime.

No, but most cus-tomers will wantmore than oneadministrative us-er.

Set up administra-tive users

□

SFTP / SMTPSetup on page 40

Any time duringthe configurationprocess

Yes for Financials& Supply Manage-ment customersand Human Capi-tal Managementhybrid installa-tions that includePayroll.

SFTP / SMTPsetup

□

ConfiguringCloudSuite Finan-cials & SupplyManagement forION


Yes for customerswho use FSM

Configuring IONBODs for Cloud-Suite Financials &Supply Manage-ment

□

Configure InforGlobal Resourcescontent and InforHCM integratedproducts (pillars)on page 45


Yes for customerswho use GlobalHR and the pillars

Configuring HCMPillars and config-uring Global HRcontent

□

GHR user / em-ployee provision-ing configurationon page 91

After user BODshave been config-ured and beforeusers are added.

YesUser provisioningsetup

□

Mass-loading in-formation for exist-ing users / employ-ees on page 80

After user BODsare configured.User provisioningtasks can be on-going simultane-ously with othertasks.

YesAdding users anduser data

□


Overview

Part II: Complete these tasks first


Complete these tasks first

Chapter 2: Complete these tasks first

Verify the initial customer administrative userThe Infor CloudOps team creates the initial user. This user should receive an email from Infor CloudOpsto register their account. Contact the recipient of the email to verify that they have received it and thatthey can access the system.

This user has administrative access to all tools, applications, and data required to perform configurationtasks. This user can create additional users who may have administrative access. Updating and creatingadministrative users and default roles on page 36

Set up the trust between the multi-tenant CloudSuiteand your SAML providerIf you plan to have a SAML connection, the trust between the CloudSuite and SAML must be establishedbefore you perform the procedures in this document.

Multiple SAML tools can be used. Instructions for configuring supported tools are in Infor CloudSuiteMulti-Tenant Trust Configuration Guide. This document is located on Support Portal, grouped with InforOS 12.x Cloud Edition configuration guides.

Setting up additional environments on a single CloudServerIf you must configure multiple environments on a single Cloud server, for example, TST, DEV, PRD,read the Infor Knowledge Base article #1883185 for information about how to proceed.



Verify availability of client applicationsClient applications are tools some users need that are accessed through a URL. Verify that these URLsexist for the tools that users of the tenant need.

To access Infor Ming.le:

Specify the URL that was sent through email. The URL will be similar to this:

https://mingle-portal.inforcloudsuite.com/<tenant>_<type>/

Registration might be required from an "Infor CloudSuite Identities - Account Registration" email sentto you from [email protected] before you can access.

To access Infor Rich Client, specify this URL:

https://gen-<tenant>-<type>.<domain>.com/canvas/native/

To access Spreadsheet Designer, Process Designer or an HTML5 location, use this URL:

https://gen-<tenant>-<type>.<domain>.com

where

• <tenant> = your tenant name• <type> = type of tenant, for example, TST, PRD, DEV, TRN• <domain> = domain where your tenant is installed, typically, inforcloudsuite.com

Other URLs are available for Infor Global HR and for Infor CloudSuite Financials & Supply Management.For convenience these URLs are listed in a later section of this document. URLs for CloudSuiteCloudSuite Corporate, Healthcare and Public Sector

Verify that applications have been createdInfor CloudOps is responsible for creating the applications that are included in this CloudSuite.

All customers should have the following applications:

• Infor Landmark• Infor Ming.le• Global Human Resources (GHR)• CloudSuite Financials & Supply Management (FSM)• LSF (hybrid installations only)

Depending on the products you have licensed, you might have other applications in addition to thesethat should have been added to Infor Ming.le.

This section explains how to determine if the applications have been added.

1 Log into Infor Ming.le as an administrator.

2 From the toolbar, select App Menu > ION Desk.



3 From the Home menu, select Connect > Connection Points.

4 Hover over each Connection Point to view its Description. If all required Connection Points appear,you can exit ION Desk. If a Connection Point that you expected to exist, does not, contact yourCloudOps representative.

Verify trusted sites in your browserVerify that these websites are shown as trusted n your browser:

• *.inforcloudsuite.com• *.birst.com, if Birst is used

Setting up compatibility for Internet Explorer browsersSome versions of Internet Explorer might be incompatible with this CloudSuite. If so, a message isdisplayed to indicate that your browser is not supported. In that case, before you can run the CloudSuitein Infor Ming.le, you must change your compatibility view settings in your browser.

These instructions apply only if you are using Internet Explorer as your browser.

1 In the browser, click Tools > Compatibility View Settings.

2 Clear the Display intranet sites in compatibility view option.

ION Connector setup tasksThese tasks are not included in this document. For information, see Infor CloudSuite Financials &Supply Management Configuration Guide for Infor Operating Service which is available Infor Xtreme.

Complete other Infor Ming.le setup tasks not coveredin this documentThis document does not provide details about how to perform such Infor Ming.le setup tasks asconfiguring language, locale and time zone, enabling email notifications and other configuration.

Instructions for configuring Infor Ming.le are in the Infor Ming.le administration online help which isavailable from docs.infor.com.



Send Landmark key information to your Infor CloudOpsteamIn preparation for data migration, existing customers who are moving to the multi-tenant Cloud fromeither on-premises or single-tenant and who use Landmark applications, must perform this procedurebefore attempting to migrate application data. If this procedure is not completed, encrypted data fromthe original system will not be readable in the multi-tenant system after migration.

Note: This topic describes how to obtain the encryption keys from an existing Landmark environment.

1 Obtain the required Landmark encryption keys and copy them to your local workstation.

a Log onto the server where the Landmark environment is installed.b The keys are stored in LASYSDIR of your Landmark system: \your_landmark_install_

dir\system

Example: D:\lmenv\system\

c Copy the keys listed below to a location on your local workstation. Important: Do not deletethe keys from the original server location. Doing so could make the Landmark system unusable.

• authen.dat• .ssotruststore• .ssokeystore

2 Create a ticket for CloudOps requesting that the keys from step 1c be loaded into each MT tenant.Attach the files that you obtained in step 1c to the ticket.

Add the What's New widget to the home pageThe What's New widget is a way to see real-time updates that have been made to your application.

This step is optional but it is a useful tool.

1 In Infor OS CE, navigate to the home page on which you want the What's new widget to appear.

2 Under Widget Catalog, click + Add Widget.3 Seach for the widget for your application and, when you find it, click the + in the top-right corner

of the page. The widget is added to your home page.

4 Click Save. The contents of the widget appear.



Chapter 3: View and update custom parameters

View custom parameters for home pagesInfor CloudSuite HCM is delivered with a custom home page that ensures users are directed to thecorrect page when they log in.

When setting up the system, it is a good idea to view the parameters for the pages of applications thatare used at your site to verify that they are enabled appropriately.

There are multiple ways to perform this procedure. The following steps describe one method.

1 Log in to Infor Ming.le as a user who has the MingleAdministrator role in Infor OS CE.

2 Click the user icon and select Admin Settings.

3 From the Manage Applications tab, open the appropriate Infor application setting, for example,Infor Global HR.

4 On the Application Details page, select the Custom Parameters tab.

• If you use Infor Global HR, the parameter is: Name=ghrplorda and Value=hcm. Verify that theparameter exists.

HROrganization custom parameterInfor Global Human Resources delivers a custom parameter for HROrganization. Because all usershave an Actor Context record for HROrganization, the parameter is not needed.

These instructions explain how to disable the parameter.

1 Log in to Infor Ming.le as a user who has the MingleAdministrator role in Infor Federation Services.


3 From the Manage Applications tab, open the Infor Global HR application.

4 On the Application Details page, select the Custom Parameters tab.

5 Locate the HROrganization custom parameter and blank out the Value.


View and update custom parameters

Configuring a system user for OpenAPI documentationDefine a system user for OpenAPI documentation.

Infor ION API contains OpenAPI documentation that collects its feeds in the background, which meansthat the Identity2 HTTP header is not available to the Landmark back-end for authentication. InforLandmark is sensitive to data context due to its configurable nature. Because Infor ION API collectsits OpenAPI feeds without a concept of a user, you must define an ION API Documentation systemuser by creating configuration parameters for the configuration feed and the individual feed.

Create the Configuration Parameter records in InforGlobal HRCreate the identity and authorization service name records.

Note: If these records have not been created automatically as part of the provisioning process inCloudSuite Portal, use these instructions to create the records manually.

1 In Infor Global HR, log in as an administrator. Open Infor Rich Client.

2 In the search field in the top right corner, enter ConfigurationParameter. In the Data section ofthe drop-down menu, select the ConfigurationParameter business class.The ConfigurationParameter dialog box appears.

3 From the Actions drop-down menu, choose Create.

4 Specify this information:

ComponentEnter httpheader

KeyEnter hcm.soap.doco.swagger.docs.collection.Identity2

TypeSelect AlphaUpper from the drop-down menu.

LengthEnter 300

ValueEnter HCM.OAUTH-IONAPI

5 Click the Save and New icon.






KeyEnter hcm.soap.doco.swagger.docs.collection.xoauth_service_name


LengthEnter 300






KeyEnter hcm.soap.doco.swagger.consolidated.Identity2


LengthEnter 300






KeyEnter hcm.soap.doco.swagger.consolidated.xoauth_service_name


LengthEnter 300


14 Click the Save icon.



Create the Configuration Parameter records in InforCloudSuite Financials & Supply ManagementCreate the identity and authorization service name records.


1 In Infor CloudSuite Financials, log in as an administrator. Open Infor Rich Client.

2 In the search field in the top right corner, enter ConfigurationParameter. In the Data section ofthe drop-down menu, select the ConfigurationParameter business class.The ConfigurationParameter dialog box appears.




KeyEnter fsm.soap.doco.swagger.docs.collection.Identity2


LengthEnter 300

ValueEnter FSM.OAUTH-IONAPI





KeyEnter fsm.soap.doco.swagger.docs.collection.xoauth_service_name


LengthEnter 300








KeyEnter fsm.soap.doco.swagger.consolidated.Identity2


LengthEnter 300






KeyEnter fsm.soap.doco.swagger.consolidated.xoauth_service_name


LengthEnter 300





Chapter 4: Optional: Make Email not required for userrecords

Optional configuration per customer request: MakeEmail not required for user recordsBy default, Email is a required field on the Infor Ming.le user record. If a customer requests that Emailnot be a required field, this can be accomplished following the configuration described in this chapter.

After the configuration in this section is performed, Email remains a field on the user record but is notrequired.

STOP! Customers must request this configuration. If you are not certain if the configuration should beperformed, do not perform it. Contact the customer before continuing.

IMPORTANT: If this configuration is performed for a hybrid installation that includes LSF-basedapplications, LSF will no longer publish user BODS; it will only receive them.

Note: It is a good idea to perform this configuration when performing post-provisioning for the tenantbut it can be done at any time.

StepsWho performsTask

KB article number 2075976Customer makes the request;CloudOps performs the configu-ration.

Use CloudSuite Portal to re-quest the Infor Ming.le configu-ration change.

Create and set the userbodcon-fig configuration parameter inLandmark to make Email notrequired on page 26

CustomerCreate and set the userbodcon-fig parameter in Landmark

KB article number 283430Customer makes the request;CloudOps performs the configu-ration..

Hybrid installations with LSFcompoments on single-tenant:Request additional configurationon the LSF side


Optional: Make Email not required for user records

Request CloudOps to make a configuration change inInfor Ming.leThe Infor Ming.le Email attribute can be configured to be not required but only Infor CloudOps personnelcan perform the configuration.

1 Make a request to your Infor CloudOps team to configure Email to be not required for Infor Ming.le.

2 In the ticket include the KB article number 2075976 which is where CloudOps can find theinformation. It is a good idea to also copy the steps from the article into the ticket.

Create and set the userbodconfig configurationparameter in Landmark to make Email not requiredThese instructions explain how to create and set the parameter. This task is performed by ICS or thecustomer.

Note: This parameter must be set in the gen data area.

IMPORTANT: If you are configuring a hybrid installation that includes multi- and single-tenantcomponents, you must perform this configuration for both deployments.

1 In Infor Rich Client on the multi-tenant Landmark tenant, log in as an administrator.

2 In the search field in the top right corner, enter ConfigurationParameter.The ConfigurationParameter dialog box appears.


4 Specify this information exactly as shown here. The parameters are case-sensitive.

ComponentEnter config

KeyEnter userbodconfig

TypeSelect Alpha from the drop down menu.

LengthEnter 300

ValueEnter IFSCE: Email address is not required. Infor Ming.le ID is required on the actor. When thissetting is used, the customer can no longer publish user BODs from LSF.

5 Click Save.

6 If you are configuring a hybrid installation, repeat this configuration for the single- or multi-tenantdeployment as needed.



Request CloudOps to perform LSF configuration forEmail not requiredIf your installation is a hybrid that includes LSF-based applications, CloudOps must perform additionalconfiguration on the LSF server.

Create a CSP ticket to request the configuration. Reference KB article # 2083430 on the ticket. Thisarticle contains the detailed configuration steps that CloudOps needs.



Part III: Preliminary user setup procedures


Preliminary user setup procedures

Chapter 5: Configuring user BODs in a multi-tenantsystem

User BODs: OverviewInfor Federation Services (IFS), which is embedded within Infor Ming.le User Management, managesusers for all systems as the central User and Security Management tool for the suite of applications inthe tenant.

When users are managed in IFS, IFS sends out security data through a user BOD to any systemsconfigured to consume them.

Infor Landmark consumes this message and creates or changes user and Actor data based on themessage. Infor Landmark also sends role data to IFS for security role authorization.

These patterns enable applications to keep in sync with IFS.

The topics in this section contain guidelines for final configuration and validation of user BODs.

When are user roles sent as batch jobs?A user BOD is automatically created in these situations:

• When you add a new Actor to a system using the MingleCreate action.• When you update an existing Actor record that changes these attributes:

• Family Name (Last name)• Given Name (First name)• Email Address

A user BOD is NOT automatically created when a user role assignment is added or updated to anexisting Actor record and no other changes are made. In this case, user role assignment changes aresent in batches and can be viewed and managed on the Async Queue.

The interval for how often the batch job is sent can be configured through Async Request Managementfor the class "SecurityBODUpdateProcessor." By default the interval is set to fifteen minutes.


Configuring user BODs in a multi-tenant system

Configuring Draft Mode for adding users in InforMing.lePerform this configuration for Landmark multi-tenant installations only.

Actor ID, a required field in Landmark, is not available when a user is initially added to the system.For this reason, Infor recommends adding users in draft mode. This configuration prevents the possibilityof a bad user BOD being sent to Landmark.

This configuration must be performed before you begin adding users, whether you are mass-importingor adding each user individually.

1 From Infor OS,, select User Menu > User Management > Security Administration > Settings> General Settings.

2 Click the box with three bars icon to access the navigation panel.

3 Select Security Administration > General Settings.

4 Open Account Creation Status and select the Create Users in Draft Status check box.

5 Click Save.

After this configuration is performed, to ensure that a valid user BOD is sent to Landmark:• When you mass-import users, you can select Activate All Users to add all existing users. You

can also activate only a subset of the existing users.• You can also select individual users to activate. To do this, select the users and access Action >

Activate Draft Users.• When you add a user individually, access that user's information in Infor OS User Management

and add the Actor Id and Roles. Then select the user and select Action > Activate Draft User.

Attaching the user BOD documents for a multi-tenantCloudSuiteInfor ION document flows describe how information flows between systems. ION document flows useION connection points to define the systems and their interfaces. User BOD configuration involvesupdating connection points and creating a document flow to implement the integration of user securitydata.

This procedure explains how to attach the appropriate user BOD documents for your product and forInfor Ming.le.

1 Log into Infor Ming.le CE.

2 Select ION Desk.

3 From the navigation pane, click Connect > Connection Points.

4 From the Connection Points view, select the connection point for your tenant, typically, "lmrkmt."

5 Click the plus sign on the Documents section.

6 On the Add Documents page, select the following required documents, and then click OK:



• Process.SecurityUserMaster• Sync.SecurityRoleMaster• Sync.SecurityUserMasterNote: To locate the documents, filter by the word security.

7 On the page to assign send and receive behavior for the documents, select the following behaviorfor each document:

• Process.SecurityUserMaster: select Send from Application• Sync.SecurityRoleMaster: select Send from Application• Sync.SecurityUserMaster: select Receive in Application

8 Click Save.

9 Click the arrow to return to the ION Desk Connection Points page.

10 Attach the documents for the Infor Ming.le/IFS connection point.

a Follow steps 3-5 but select the connection point for Infor Ming.le/IFS, "instance01." Use thedescription of the connection point to identify it.

b Follow steps 7-11 to add the required documents for the Infor Ming.le/IFS connection point.Select the following behavior for each document:

• Process.SecurityUserMaster: select Receive in Application• Sync.SecurityRoleMaster: select Receive in Application• Sync.SecurityUserMaster: select Send from Application

11 Click Save.

Creating the document flow for user BODS in amulti-tenant CloudSuiteThis configuration specifies how ION should process user BODs. This configuration must be performedfor each type of product included in the installation.

This topic describes two ways to configure the document flow for sending user information fromLandmark to IFS, an automated way (Step 3) and a manual method (Step 4). At the time this documentwas published, only the Landmark-to-IFS document flow is automated.

1 From the Infor ION Desk navigation pane, select Connect > Document Flows.

2 From the Document Flows view, Add and specify a name and description for the flow. Click Save.

Note: Use a name that describes the purpose of the flow, for example <product>_User_BOD,where <product> is the name of the product being configured.

3 Automated method. Add the send application and required documents to the flow. This is theapplication that sends users from the product to Infor Ming.le/IFS.

a Locate the Infor Xtreme KB article # 1932988 and download the XML document attached tothe article.

b Import the document.



4 Manual method. Add the send application and required documents to the flow. This is theapplication that sends users from the product to Infor Ming.le.

a Select the Application icon and drag it to the space between the Start circle and the End circlein the document flow diagram.

b On the Application Activity Properties screen, populate the name field with a name for thesending application, for example, LandmarkMT_Send.

c Click Add (plus icon) on the Application Activity Properties section.d Select the application point you want to work with, for example, LandmarkMT, and click OK.e To attach the required documents, click the paper icon next to the application name in the flow

diagram and click Add.f Select the Sync.SecurityRoleMaster and Process.SecurityUserMaster documents, and

then click OK.

5 Add the Infor Ming.le CE application and required documents to the flow:

Note: Customers use the connection point for LandmarkMT (IOBox ). The Landmark_IMS connectionis visble to customers but it is not used.

a Select the Application icon again and drag it to the space between your LandmarkMT applicationand the End circle in the document flow diagram.

b On the Application Activity Properties screen populate the name field with a name for thereceiving application, for example, Infor Ming.le CE or IFS CE.

c Click Add (plus icon) on the Application Activity Properties section.d Select the connection point with a description of "Mingle" and click OK.e To attach the required documents, click the paper icon next to the application name in the flow

diagram and click Add.f Select the Sync.SecurityUserMaster document and click OK.

6 Add the LandmarkMT connection point again as the receive application for the flow. This is theapplication that receives users from Infor Ming.le/IFS.

Note: This application does not need documents.

a Select the Application icon and drag it to the space between the Infor Ming.le CE applicationand the End circle in the document flow diagram.

b On the Application Activity Properties screen populate the name field with a name for thesending application, for example, LandmarkMT_Receive.

c Click Add (plus icon) on the Application Activity Properties section.d Select the LandmarkMT application and click OK.

7 Verify that the flow has three applications and that they appear in the following order (from left toright):

• Send application from Landmark_MT to Infor Ming.le/IFS• Send application for Infor Ming.le/IFS to the product• Receive application for Landmark_MT from Infor Ming.le/IFS

8 Click Save.

9 Activate the flow.

a Review the configuration and make sure you have correctly assigned connection points, alignedthem in the correct location on the view, and assigned the correct documents.

b To activate the flow, in the Document Flow view, click the Activate icon.

Note: Hover over each icon to display a tool tip to help identify the Activate icon.



Mass synchronization of roles and users

Verifying status of Async ION queuesBefore you mass-synchronize Landmark roles and users, you must verify that ION queues do notcontain records with a status of Terminated Abnormally.

1 Log into Infor Rich Client as an actor who has been assigned one of the following roles:

• JobQueueServer_ST• AsyncJobAdministrator_ST

2 Perform a search for Async.

3 Select Async Overview.

4 From the Queue View, select IONInbox and check the Triggers section of the IONInbox queue. Ifany Terminated Abnormally records exist, select each one and click Delete and then confirm thedelete by clicking Yes.

5 From the Queue View, select IONOutbox and check the Triggers section of the IONOutbox queue.If any Terminated Abnormally records exist, select each one and click Delete and then confirm thedelete by clicking Yes.

6 From the Async View, select DefaultQueue and check the Triggers section. If any TerminatedAbnormally records exist, select each one and click Delete and then confirm the delete by clickingYes.

Mass-synchronizing Landmark roles to Infor Ming.le/IFSIn conjunction with synchronizing BODs, Infor Rich Client is used to send Landmark roles to InforMing.le/IFS.

1 Log into Infor Rich Client as a security administrator.

2 Navigate to User Management - Role List, and then select Actions > Send BOD for All Roles.

Verify logical IDs of roles added through BODsAfter roles have been synchronized through the SecurityRoleMaster user BOD, use Infor Ming.le toverify that the logical IDs for the roles are what you expect them to be.

1 As a user with administrative privileges, log into Infor Ming.le.

2 Click the User menu (person icon) and then select User Management.3 Click the Details menu (box with three lines icon).

4 Expand the Navigation pane (right side of page) and then expand Configure > Master Data Types.



5 Click Security Roles and verify that the correct Landmark roles and the correct logical ID areshown. For example, verify that the logical ID ends with ".lmrkmt" if that is the appropriate ID foryour tenant.

Performing a smoke test for multi-tenant LandmarkPerform these steps to verify that you have configured the user BODs for multi-tenant Landmarkcorrectly. The test also confirms that the user BOD was sent and received appropriately by Landmarkmulti-tenant.

These steps are performed using both Landmark and Infor Ming.le/IFS.

1 In Landmark, access the Actor list.

2 Create a new actor by clicking Action > Infor Mingle Create. Provide information for the newActor on the Detail tab and click Save when you are finished.

On the Detail tab, Actor, Family Name, and Given Name are required fields for all actors.

Depending on configuration, you must populate either Mingle ID, which appears directly belowActor, or Valid Email Address which is on the Contact tab.

3 Verify that the identity was created. In Landmark, from the Actor list, search for the Actor and clickthe Identity tab and verify that an identity exists.

If the identity is not created or the record does not exist, see Step 5.

4 Verify that the new user was created in Infor Ming.le/IFS. In Infor Ming.le/IFS, go to UserManagement and search for the record. The GUID must have the same value as the user's identityin Landmark.

If the GUID is not created or the record does not exist, see Step 5.

5 Access ION Desk One View to verify that the Security.User.Master BOD record has been receivedby Infor Ming.le/IFS.

6 Optional: Re-run these steps in reverse order. For example, if you added a user in Landmark andthen tested first in both Landmark and then in Infor Ming.le/IFS, this time add the user in InforMing.le/IFS, test first in Infor Ming.le/IFS and then in Landmark.

If the smoke test is successful and your installation includes only multi-tenant Landmark, the user BODconfiguration is complete. If the smoke test was not successful, one reason might be that your installationhas additional requirements as it would in, for example, a hybrid scenario. Perform additionalconfiguration as required and then rerun the smoke test.



Chapter 6: Additional user setup procedures

After configuring user BODs, other user setup steps are required to ensure that mass-loading processesrun smoothly. These include:

• Creating enterprise structures: This set of procedures is required before you can mass-importusers. This document provides an overview of the tasks and lists documentation resources. Thespecific steps are not in this document.

• Creating administrative users: This step is optional but most customers want to have multipleadministrators in their tenant. The specific steps are in this document.

Creating enterprise structures and loading employeedata: OverviewThis topic provides a high-level overview of prerequisite tasks that must be completed before youperform user provisioning procedures in this document.

Note: User BOD configuration is an exception. It can be done before you create structures and mustbe done before you provision users.

This CloudSuite requires that the following structures exist before you begin adding users:

• EnterpriseGroup: This group must exist before you create HROrganization.• FinanceEnterpriseGroup: At the time of this document's publication, this group is required for Infor

CloudSuite Financials & Supply Management.• HROrganization: Required for all customers.

Information about how to create EnterpriseGroup and the HROrganization is in the Global HumanResources User Guide.

Note: If you are creating a FinanceEnterpriseGroup, you can follow the same steps that you followedto create the EnterpriseGroup.

After the structures have been created, you must load Employee data. Information about how to performthis series of steps is in Infor Talent Management Data Load Guide.


Additional user setup procedures

Updating and creating administrative users and defaultroles

Updating the initial userInfor CloudOps creates an initial user, also known as a bootstrap user, that enables you to provisionthe tenant at hand-off. This user requires configuration before it can be used to perform provisioningtasks.

1 From Landmark, perform an Actor search to locate the user provisioned by CloudOps.

2 Initially the Given Name field contains ther user's email address and the Family Name field containssomething similar to "domainname.com." Edit these fields so that Given Name contains the user'sfirst name and Family Name contains the user's last name.

3 Click Save when you are finished updating.

Create a new administrative user account in IFS (optional)Creating additional users who are able to perform administrative tasks is optional but many customerswant to do so. Customers might also want to create users who have access only to specific administrativetasks but do not have wide-open access to the entire system.

1 As the customer administrator created by CloudOps, log in to IFS User Management for InforMing.le User Management.

2 Add a new account and provide First Name, Last Name and Email address.

3 Open the new account and add Actor ID and other information as required by your site. Also addroles. Infor recommends that Infor Ming.le administrators have these roles in addition to defaultroles assigned to all users: Recommended default roles

• IFS-Administrator: This role provides access to user management tasks and should be assignedonly the users who are responsible for these tasks.

• Infor-SystemAdministrator: This role entitles the user to perform system level configurationchanges. This powerful role should be assigned to only a limited number of users.

4 Select the new user by clicking the check box in front of the row, and, from the dropdown menu,select Activate Draft user.

5 Select the new user again by clicking the check box in front of the row, and, from the dropdownmenu, select Resend activation. The new user receives an email invitation to register with the InforMing.le CE site. After the new user registers, a second email will be sent for verification. Thismessage contains the Infor Ming.le URL.



Setting roles to be automatically assigned to all new usersin Infor Ming.leThis procedure describes how to make a roles default for all users. When a new user is added to thesystem, roles that are designated as "Assign to New Users" will automatically be assigned.

You can also follow the steps in this procedure to assign a role to existing users.

1 As a user with administrative privileges, log into Infor Ming.le.

2 Click the User menu (person icon) and then select User Management.3 Click the Details menu (box with three lines icon).

4 Select Configure > Master Data Types > Security Roles.

5 Locate the role you want to update from the list and double-click on it.

6 Check the Assign to New User option. If you want to assign this role to existing users, selectAssign to All Existing Users.

7 Click Save when you are finished updating this role.

Recommended default rolesReview the default roles that are assigned to new users and determine if they are correct for yoursystem.

Infor recommends that all users have the following roles:

• MingleEnterprise• MingleION Enabled• Document Management User• HomePages User• IEFINBaseSystemandDataAccess_ST: Required of all Infor CloudSuite Financials & Supply

Management users.• GHRUsers: Required for any user who requires access to Infor Global Human Resources/Talent

Management.

Infor Landmark roles for administrative usersSome users might require administrative access to Infor Landmark to perform configuration tasks.

Landmark administrators might require the following roles:

• Admin_ST, Global HR administrative role• ApplicationAdministrator_ST• AsyncJobAdministrator_ST• ConfigurationAccess_ST• IEFINBaseSystemandDataAccess_ST, required for all Financials & Supply Management users



• JobQueueServer_ST• PersonalizationAccess_ST• ProcessServerAllAccess_ST• SecurityAdministrator_ST

Assigning roles to initial users in Infor Rich Client (optional)This topic describes how to assign Landmark roles to users using Infor Rich Client.

More details about working with Landmark roles are in the user and security administration guide foryour CloudSuite.

Note: You can also perform this task using Admin Console.

1 Launch the CloudSuite multitenant Infor Rich Client by specifying a serverURL:https://gen-<tenant>-<type>. inforcloudsuite.com/canvas/native/

where

• <tenant> = your tenant name• <type> = the type of tenant, for example, TST, PRD• <domain> = the domain where your tenant is installed, typically, inforcloudsuite.com

Select the Infor Rich Client Admin RichClient64 (tenant_type) with no fsm or hcm after it. Forexample, https://<gen>-<tenant>-<type>.<domain>.com

Note: Internet Explorer users can use Infor Rich Client from within Infor Ming.le to perform thesesteps.

2 In Infor Rich Client, select User Management > Role Management.3 On the Role List, locate a role. Do this by performing a search or scrolling and then double-clicking

the role name

4 On the Roles Assigned to Actor tab, select Actions > Assign Existing Role to Actor.5 Select the actor to assign the role to and then click Save.



Part IV: Tenant setup


Tenant setup

Chapter 7: SFTP / SMTP Setup

This section contains procedures relating to setting up SFTP or SMTP servers which you might needto do depending on the products you license. Review each section to determine if the procedure isrequired for your site.

Configuring Administration Console for internalcommunicationInfor CloudSuites Corporate, Healthcare and Public Sector customers who use CloudSuite Financials& Supply Management require access to an Infor-provided service named FTS.

This internal SFTP server is used for internal application data exchange and can also be used forAdministration Console.

It is not used for connecting to outside sources, including EDI or bank statement imports. Customerswho require secure connections with trading partners can provide their own SFTP site or use the setupcreated by their trading partner.

Log into the internal FTS serverIf you use Infor CloudSuite Financials & Supply Management in a multi-tenant deployment, use thesesteps to log into the internal FTS using the server name, user ID and password supplied by yourCloudOps team.

If you did not receive the credentials for the FTS or if they do not give you access to the server, opena support ticket with CloudOps through Infor Xtreme.

1 From Infor Ming.le CE, access the CloudSuite Financials application page.

2 Select the drop-down menu under the data area name and choose Administration Console.

3 Populate these values, which are blank by default:

• ftpdirectory= /AdminConsole. This directory already exists.• ftphost = Host name for the SFTP server. This information is provided by CloudOps.• ftpport = 22• ftpsecure = true


SFTP / SMTP Setup

• ftpuserid = Tenant-specific user ID in format: tenant-typ-ftp This information is providedby CloudOps.

• ftppassword = Tenant-specific user password. This information is provided by CloudOps. (Ifthis field does not exist, see step 4.)

• datasizelimit = Default if left blank is 100GB.

4 If the ftppassword field is not included in the previous step, create the password following thesesteps.

a From the Administration Console main menu, select the Create menu and click Create.b Populate these fields:

• Name: tenant-typ-ftp• Type: Password• Length: 100• Value: The ftp user password

c Click Save.d Click Back on the browser to return to the main page.

Note: If any of the lines for the field you just added show a yellow diamond icon, it means you mustsave the value for the field.

Set up SFTP for Electronic PaymentIf your CloudSuite Financials and Supply Management installation includes the Electronic Paymentmodule, you must enable SFTP communication for Electronic Payment.

1 From Infor Ming.le CE, navigate to the CloudSuite Financials application page.

2 Select the drop-down menu under the data area name and choose Process Server Administrator.3 From the Process Server menu, select Configuration > System Configuration.

4 Select the Configuration Set named "system."

5 On the Properties tab, populate these fields:

• DataFileDirectory: Specify a period (.) here. This is a virtual directory that is not actuallycreated.

• DestinationDirectory: Specify /ElectronicPayThis directory, which should already becreated, is where electronic payment files are transferred.

6 Move to the File Transfer tab and select Create.

7 Specify the values for the FTS server connection, user name and password for the tenant you areconfiguring. These values were provided by Cloud Ops. For Protocol, select SFTP.

8 Click Test Connection. A valid response will have a header "Error for 'Test Connection'" with amessage text of "Test connection successful."

9 Click Save.


SFTP / SMTP Setup

Configure SMTP email setup for NotificationsIf you use Infor CloudSuite Financials and Supply Chain, you might need to configure an email serverfor notifications.

Note: This procedure might already had been performed when your tenant was provisioned.

1 From Infor Ming.le CE, navigate to the CloudSuite Financials application page.

2 Select the drop-down menu under the data area name and choose Process Server Administrator.3 From the Process Server menu, select Configuration > System Configuration.

4 Select the Configuration Set named "system."

5 On the Properties tab, populate these fields:

• mailFrom: Specify the email addres from which you want to receive notification emails. Thisdoes not have to be an actual address.

• MailServer: Specify the address for the SMTP mail serer for you AWS region.• For US-EAST-1 (N. Virginia) region value: Specify

smarthost145.prod.inforcloud.local• For EU-CENTRAL-1 (Frankfurt) region value: Specify

smarthost165.prod.inforcloud.localNote: If other regions are required, they must be provided by CloudOps.

6 On the Email tab, click the Create icon to add new record and in the Mail Server field, specify theserver.

• For US-EAST-1 (N. Virginia) region value: Specify smarthost145.prod.inforcloud.local

• For EU-CENTRAL-1 (Frankfurt) region value: Specifysmarthost165.prod.inforcloud.local

Note: If other regions are required, they must be provided by CloudOps.

7 You can retain default settings for other fields. Click Save.

8 Click Test Connection to confirm.

9 Optional. Verify that the correct email is selected for the RequisitionApproval process.

a Go to Process Server Administrator > Application Defined Process Definitions.b View the RequisitionApproval process and confirm that the system Email Configuration is

selected.

Perform multi-tenant configuration for tenants usingInfor Human Resource Management (hybridconfiguration)If your installation includes Infor Human Resource Management (HRM), it means you are in a hybridconfiguration in which software components are installed in both a multi-tenant and single-tenant cloud.The communication between the two clouds is through an internal SFTP server, referenced as "FTS"in this document, that both clouds send and receive files to/from.


SFTP / SMTP Setup

This section provides setup tasks that customers must perform.

Verify that you have received the File Transfer Server (STS)credentials from your Infor CloudOps teamA user ID and password for logging onto your FTS should have been included in your welcome letterwhen you became a multi-tenant customer using the GHR product.

Verify that you have these credentials before performing the configuration steps in this section.

Configure the FTS channel with tenant-specific informationThe FTS channel must be configured with local information for the tenant.

1 Log into Infor Global HR as an administrator.

2 Navigate to Process Server Administrator > Administration > Channels Administrator.3 On the File Channels tab, double-click the FTS channel to select it.

4 On the Overview tab, populate the following fields:

• Source Directory: Specify the full path to /GHRTransfer.• Error File Directory: Specify the name of a folder where error files will be created. This can

be any name. (For multi-tenant, this is a location in the database, not on the file system.)• In-Progress File Directory: Specify the name of a folder where the file channel will deliver

files to be transferred. This can be any name. (For multi-tenant, this is a location in the database,not on the file system.)

• File Channel Type: Select Remote.• Host: Specify the IP address of the FTS.• Protocol: Select Sftp.• Authentication Type: Select User and Password• User: Specify the user that will run the FTS connection.• Password: Specify the password for the user running the FTS connection.

5 Click Save.

Update the main configuration setThe Process Server configuration set, "main," must be updated with values for the tenant.

1 In Infor Global HR, navigate to Process Server Administrator > System Configuration.

2 Select the "main" configuration and move to the File Transfer tab.

3 On the File Transfer tab, click the Create button (plus sign icon) and on the page that appears,populate the following fields:


SFTP / SMTP Setup

• Host: Specify the IP address of the FTS server.• Authentication Type: Select User and Password• User: Specify the user that will run the FTS server.• Password: Specify the password for the FTS user.• File System: Select Local.

4 Click Save.

Activate receiversWhen you are ready for receivers to begin listening for files, activate them following these steps.

1 In Infor Global HR, navigate to Process Server Administrator > Administration > ChannelsAdministrator.

2 On the File Channel Receivers tab, select the receiver from the list that you want to activate.

3 With the receiver selected, move to the toolbar menu and click Action > Activate.


SFTP / SMTP Setup

Chapter 8: Configure Infor Global Resources contentand Infor HCM integrated products (pillars)

This chapter describes the steps to set up the integration for Infor HCM products. Infor refers to theseproducts as pillars.

The process of setting up the integration is referred to as orchestration. Applications are provisionedin CloudSuite Portal by CloudOps. The exception is the Infor Human Resource Management application,which is not deployed in MT CloudSuite Portal.

After provisioning, the applications may be required to be configured following the steps in this chapter.

Before you perform the instructions in this section, you must:

• Define an HROrganization and an EnterpriseGroup. If you have not yet done so, do so beforecontinuing with the procedures in this section.

• Confirm that the correct applications are included in your deployment. Configure only the applicationsthat your customer uses.

Note: If you must provision applications manually, for example in an on-premises deployment, do notuse the process outlined in this chapter. Instead, follow the steps in the Infor Global HR and TalentManagement Integration Guide.

Configure Global Human Resources contentIf the applications in your deployment were provisioned properly in CloudSuite Portal, the Global HRproduct (pillar) and Configuration Parameter records will exist. In this case, go directly to thoseinstructions in this document and perform the task. Configure Global Human Resources on page 50

In some deployments, the configuration parameter records are not created properly. In this case, firstfollow the steps in this section to create the records, actor, identity, and identity-actor link, and assignthe role. Then configure the Global HR pillar.

Create the ConfigurationParameter recordsCreate the fully-qualified domain name, password, product line, and user identity records.


Configure Infor Global Resources content and Infor HCM integrated products (pillars)


1 In Infor Global HR, log in as an administrator.

2 In the search field in the top right corner, enter ConfigurationParameter.The ConfigurationParameter dialog box appears.



ComponentEnter orchestration.

KeyEnter GHR-FQDN.

TypeSelect Alpha from the drop-down menu.

LengthEnter 300.

ValueEnter FQDN.





KeyEnter GHR-Password.


LengthEnter 300.

ValueEnter the password.







KeyEnter GHR-ProductLine.


LengthEnter 40.

ValueEnter hcm.





KeyEnter GHR-UserIdentity.


LengthEnter 300.

ValueEnter wsiadmin.





KeyEnter GHR-HROrganization.


LengthEnter 40.

Value: Specify the customer's HROrganization




Create the actorCreate the wsiadmin actor.

Note: If this actor has not been created automatically as part of the provisioning process in CloudSuitePortal, use these instructions to create the actor manually.


2 In the search field in the top right corner, enter Actor. Open the Actor List.



ActorEnter wsiadmin.

Family NameEnter wsiadmin.

Given NameEnter wsiadmin.

Preferred NameEnter wsiadmin.


Create the identityCreate the wsiadmin identity.

Note: If this identity as not been created automatically as part of the provisioning process in CloudSuitePortal, use these instructions to create the identity manually.


2 In the search field in the top right corner, enter Identity. Open the Identity business class.

3 From the Actions drop-down menu, choose Create Form-Based Identity.


ServiceSelect Administration from the drop-down menu.

UsernameEnter wsiadmin.

PasswordEnter the password.




Create the identity-actor linkLink the actor to the identity.

Note: If this link has not been created automatically as part of the provisioning process in CloudSuitePortal, use these instructions to create the link manually.



3 Click the Identity tab.

4 From the Actions drop-down menu, choose Assign Existing Identity To Actor.5 Specify this information:


IdentityEnter wsiadmin.


Assign the roleAssign the role to wsiadmin.

Note: If this role has not been created automatically as part of the provisioning process in CloudSuitePortal, use these instructions to create the role manually.



3 Select the wsiadmin actor.

4 Click the Roles tab.



RoleSelect Admin_ST from the list.


Configure integration for HCM associated productsAfter Infor CloudOps has added these products to your deployment, you must configure each one thatyour customer uses.



These configuration instructions assume that the applications were deployed with multi-tenant CloudSuitePortal. If your applications were not deployed with multi-tenant CloudSuite Portal, follow the manualinstructions in the Infor Global HR and Talent Management Integration Guide.

Exception: Human Resources Management (HRM) is never deployed in multi-tenant CloudSuite Portal.Follow configuration instructions are in this section.

The following prerequisites must be met before performing the configuration in this section. They applyto all applications.

• EnterpriseGroup has been created by ICS or the customer• HROrganization has been created by ICS or the customer

HCM associated product checklistUse this checklist to verify if a product in the HCM suite has been licensed by your suite. If it has beenyou must perform the configuration. If it has not been, do not perform configuration.

Note: In some cases, you might see the term "pillar" in the user interface. This term means product.

Configuration instructionsLicensed for your tenant?Product

Configure Global Human Re-sources on page 50

If yes, perform configurationusing instructions in the nextcell.

Global Human Resources

Configure Infor Human Re-source Management (HRM) onpage 52


Infor Human Resources Man-agement (HRM)

Configure Infor Human Re-sources Service Delivery(HRSD) on page 55


Human Resources Service De-livery (HRSD)

Configure Infor Learning Man-agement System (LMS) on page59


Infor Learning ManagementSystem (LMS)

Configure Infor Talent Science(TS) on page 65


Infor Talent Science (TS)

Configure Global Human ResourcesConfigure the Infor Global Human Resources (GHR) in your deployment.





2 In the search field in the top right corner, enter OrchestrationData.

3 On the Orchestration Data page, look for GHR in the list. Double-click GHR in the list to open therecord. If GHR is not in the list, create it manually.

4 If the Organization field is not pre-populated, perform the following substeps to add it.

a On the form, select the Organization from the drop-down menu.b Save the record.c Click Actions > Get GHR Orchestration.

The Get Parameter Status window should display a status of "SUCCESS" and a message of"OK" in the Get Error String columns in the list. If the action fails, contact Support.

5 On the form the following information should default:

HttpTake the default option, which should be https://.

FQDNTake the default option, which should be adm-[tenantname]-ax1.auto.aws.infor.com.

PortTake the default option, which should be 9443/.

GHR Product LineTake the default option, which should be hcm. If you specify a different value for this field, notethat the character limit is 40. Any name longer than 40 characters will be truncated.

GHR Environment VarTake the default option.

GHR User IdentityTake the default option. This value is the user ID provided by the Infor Global Human Resourcesteam.

GHR PasswordTake the default option. This value is the password provided by the Infor Global Human Resourcesteam.



GHR Behavior Profile UrlEnter the URL of the ADM endpoint. The URL is in the format https://adm-[tenantname]-ax1.tam.aws.infor.com.

GHRSSO ProtocolTake the default option. The default is SAMLv2.0.

Primary SSO Servlet Machine ProtocolLeave this field blank.

Primary SSO Servlet MachineLeave this field blank.

Primary SSO Servlet PortLeave this field blank.

6 Click OK.

Configure Infor Human Resource Management (HRM)If you use Infor Human Resource Management, you must configure the HRM interface in yourdeployment. Because this application is not deployed by MT CSP, you must manually perform the theHRM integration.

Do not perform this configuration if your customer does not use HRM.

This configuration can be performed by ICS or the customer. If the customer performs the configuration,they will likely require assistance with values from ICS.

This configuration can be performed any time after HRM is deployed.



2 In the search field in the top right corner, enter OrchestrationData.The Orchestration Data dialog box appears.

3 From the Actions drop-down menu, choose Create Pillar.a Verify that the Organization field is populated by default with the customer's HROrganization.

If the Organization field is not populated by default, select the customer's HROrganization fromthe drop-down list.

b In the Pillar Integration field, select HRM from the drop-down list and click Save.c From the Action menu, click Configure HRM Interface.


Interface Setup: Take all default settings in this section.

File Selection: Take all default settings in this section.

Configuration Properties



Audit Report Audit OutputEnter the name of the output text file. The default is TMHRMAudit.txt.

Audit Report As Of DateEnter the date of the audit. Optional.

Audit Report Email FromEnter the sender of the output file. Optional.

Audit Report Email ToEnter the recipient of the output file. Optional.

Audit Report LT 213 DirectoryTake the default setting. The default is $LAWDIR/print/user/lt213/1/.

Audit Report LT 213 FileTake the default setting. The default is empaudit.tm.

Audit Report TM File DirectoryTake the default setting. The default is %LASRCDIR%/hcm/pflows.

Audit Report TM File NameTake the default setting. The default is TMAudit.tm.

Interface Home AddressTake the default setting.

Interface Supplemental AddressTake the default setting.

Interface Use Job Short DescriptionTake the default setting.

Interface Use Pay Grade DescriptionTake the default setting.

Interface Use Pay Step DescriptionTake the default setting. The default is Auto Sequence.

Interface Use Position Short DescriptionTake the default setting.

Interface Use Manager Short DescriptionTake the default setting.

LTM Alternate LocaleTake the default setting.

LTM Enterprise GroupTake the default setting.

LTMFTP Source DirectorySpecify [server]_ax1_hcm/



LTMFTP Target DirectoryEnter ./lawson/ftp_root/[server]/HCM_Outbound/. If the HCM_Outbound directory doesnot exist on the external FTP server, create it there.

LTMFTP To S 3Take the default setting.

LTM HRM ProdlineTake the default setting. The default is LSAPPS.

LTM Interface Error From EmailTake the default setting.

LTM Interface To EmailTake the default setting.

LTM Life Event From EmailTake the default setting.

Infor Lawson Connection

UserEnter the user name of the Infor Lawson connection account.

PasswordEnter the Infor Lawson connection account password.

Data AreaEnter LSAPPS.

Web RootEnter https://[webserver]-lsf01.cloud.infor.com:1447.

FTP Connection

HostEnter [hostname].compute-1.amazonaws.com.

ProtocolChoose Sftp from the drop-down menu.

Authentication TypeChoose User And Password from the drop-down menu.

UserEnter the FTP connection account user name.

PasswordEnter the FTP connection account password.

5 Click OK.



Configure Infor Human Resources Service Delivery (HRSD)If the customer uses Infor Human Resources Service Delivery (HRSD), perform configuration tasks inthis section as required.

Do not perform this configuration if your customer does not use HRSD.


The configuration can be performed any time after HRSD is deployed in MT CSP and added to TAMin MT CSP. For more information on deploying HRSD, see the Infor Global HR and Talent ManagementIntegration Guide.

Verify HRSD integrationIf you use the HRSD application, perform the steps in this section to determine if preliminary configurationtasks have been performed.


2 Verify configuration parameters.

a Search for ConfigurationParameter. From the Configuration Parameters List, click the Searchicon and, when the row for filtering appears, click in the Key column, specify HRSD and thenpress Enter.

b Verify that the following parameters have been configured:

• HRSDORCHESTRATION.WSI.ENDPOINT• HRSD-Environment• HRSD-Organization

c If the parameters exist, continue with step 3.d If the parameters do not exist, configure them manually before continuing with the rest of the

tasks in this section. Create HRSD configuration parameters manually on page 58.

3 Verify orchestration data for HRSD and update if necessary.

a In the search box at the top-right of the screen, specify OrchestrationData.

On the Orchestration Data page, you should see something similar to the following, dependingon the products your customer uses.



b For HRSD, verify that:

• The Pillar/Integration column shows HRSD.• The Organization column shows the correct HROrganization for the customer.• The Get Status column shows SUCCESS.• The Get Error String column shows OK.• The Set Status column shows SUCCESS.

c If HRSD is listed in the Pillars/Integration column, continue with substep 3d. If HRSD is notlisted, the reason might be that it was never added or it was added but contained errors. ContactCloudOps to determine which situation has occurred.• If the application was not added, CloudOps must add it.• If it was added but contains errors, attempt to fix the errors by performing the rest of the

steps and substeps in this section.

d If the customer's Organization field contains the correct HROrganization, continue with step4. If Organization does not contain the correct HROrganization, perform substeps 3e-3h.

e Click HRSD and from the page that appears, click Organization and select your HROrganizationfrom the drop-down list.

f Click Save.g From the menu, click Actions > Get HRSD Orchestration.

The Status field should show "SUCCESS 200" and the Message field should show "OK." Ifyou received the success message, continue with step 3h. If you did not receive the successmessage, contact your HRSD team.

h If you received a SUCCESS 200 message for the Get operation, click Actions > Set HRSDOrchestration.The Status field should show "SUCCESS 200" and the Message field should show "OK." If itdoes, continue with step 4. If it does not, contact your HRSD team.

4 Click Actions > Configure HRSD Interface and verify that the fields on the page are populated.If the fields are populated, you have completed configuring HRSD. If the fields are not populated,you must configure HRSD manually by performing the remaining steps in this section.

5 On the HRSD Configuration Properties page, specify this information:

HRSD Subscriber NameEnter the subscriber name provided by the HRSD team.



Organization HRSD Configuration

User IdEnter the user ID provided by the HRSD team.

PasswordEnter the password provided by the HRSD team.

CodeTake the default setting.

ParamsTake the default setting.

Service: Supply the following information in the Service section only if you are not usingPingFederate. You must populate this content if Landmark is the IDP.

HRSD ServiceTake the default setting.

Primary SSO Servlet Machine ProtocolTake the default setting. The default setting is HTTPS.

Primary SSO Servlet MachineTake the default setting.

Service TypeTake the default setting. The default setting is Form Based.

VersionTake the default setting.

Service ProtocolTake the default setting. The default setting is HTTPS Only. The Is Reference checkbox shouldbe checked.

Reference Service NameTake the default setting. The default setting is SSOPV2.

FQDN/HRSD Server ProtocolTake the default setting. The default is HTTPS.

FQDN/HRSD ServerEnter the name of your FQDN/HRSD server.

HTTP PortEnter port 80.

HTTPS PortEnter port 443.

Home Page URLEnter the home page URL provided by the HRSD team.



Login Page URLEnter the Login Page URL provided by the HRSD team.

Service Logout Response RequiredTake the default setting.

Logout URLEnter the Logout URL provided by the HRSD team.

SSO ProtocolTake the default setting. The default is SAMLv2.0.

Service ProtocolTake the default setting. The default is HTTPS_ONLY.

6 Click OK.

Create HRSD configuration parameters manuallyPerform this task only if HRSD configuration parameters have not been configured through CSP andmust be created manually.

1 If you are not logged into Infor Global HR as an administrator, log in.

2 If the Configuration Parameters page is not open, search for ConfigurationParameter.3 From the Configuration Parameters page, click the Search icon and, when the row for filtering

appears, click in the Key column, specify HRSD and then press Enter.

4 From the menu, click Actions > Create.



KeyEnter HRSDORCHESTRATION.WSI.ENDPOINT

TypeSelect URL

LengthEnter 256.

ValueSpecify the customer's value.






KeyEnter HRSD-Environment.


LengthEnter 25.

ValueSpecify the customer's environment.




KeyEnter HRSD-Organization.


LengthEnter 25.



Configure Infor Learning Management System (LMS)If the customer uses Infor Learning Management System, perform configuration tasks as required.

Do not perform this configuration if your customer does not use Infor Learning Management System.


The configuration can be performed any time after LMS is deployed in MT CSP and added to TAM inMT CSP.

Verify LMS integration1 In Infor Global HR, log in as an administrator.




a Search for ConfigurationParameter. From the Configuration Parameters List, click the Searchicon and, when the row for filtering appears, click in the Key column, specify LMS and thenpress Enter.


• LMSORCHESTRATION.WSI.ENDPOINT• LMS_AdminHomePage• LMS_HomePage• LMS_WebServiceEndpoint


tasks in this section. Create LMS configuration parameters manually on page 63.

3 Verify orchestration data for LMS and update if necessary.



b For LMS, verify that:

• The Pillar/Integration column shows LMS.• The Organization column shows the correct HROrganization for the customer.• The Get Status column shows SUCCESS.• The Get Error String column shows OK.• The Set Status column shows SUCCESS.

c If LMS is listed in the Pillars/Integration column, continue with substep 3d. If LMS is not listed,the reason might be that it was never added or it was added but contained errors. ContactCloudOps to determine which situation has occurred.• If the application was not added, CloudOps must add it.• If it was added but contains errors, attempt to fix the errors by performing the rest of the



e Click LMS and from the page that appears, click Organization and select your HROrganizationfrom the drop-down list.



f Click Save.g From the menu, click Actions > Get LMS Orchestration.

The Status field should show "SUCCESS 200" and the Message field should show "OK." Ifyou received the success message, continue with step 3h. If you did not receive the successmessage, contact your LMS team.

h If you received a SUCCESS 200 message for the Get operation, click Actions > Set LMSOrchestration.The Status field should show "SUCCESS 200" and the Message field should show "OK." If itdoes, continue with step 4. If it does not, contact your LMS team.

4 Click Actions > Configure LMS Interface and verify that the fields on the page are populated.If the fields are populated, you have completed configuring LMS. If the fields are not populated,you must configure LMS manually by performing the remaining steps in this section.


Interface Setup

Get Courses List By Date Last RunChoose a date and time.

LMS TopicEnter LMSTOPIC.

Number Of UnitsEnter 30.

Unit TypeChoose Days from the drop-down menu.

Learning Management Configuration Properties

LMS Email FromEnter the email address of the person responsible for the LMS system.

LMS Email ToEnter the recipient of LMS emails.

LMS File DirectoryLeave this field blank.

LMS OrganizationEnter HROrganization.

Learning Management Web Service Connection

UserEnter the user name given by the LMS team.

PasswordEnter the password given by the LMS team.

Learning Management FTP Connection

HostEnter the FTP host provided by the LMS team.



ProtocolChoose Sftp from the drop-down menu.

Authentication TypeChoose User And Password from the drop-down menu.

UserEnter the user name given by the LMS team.

PasswordEnter the password given by the LMS team.

Configuration Parameters

Pimary SSO Sevlet Machine ProtocolChoose HTTPS from the drop-down menu.

Primary SSO Servlet MachineEnter the URL of the Infor Ming.le host.

Primary SSO Servlet PortLeave this field blank.

Admin Home PageEnter the URL of the admin home page provided by LMS.

Home PageEnter the URL of the home page provided by LMS.

File Channel

Channel Is EnabledMake sure this box is checked.

File Channel SiteTake the default setting. The default is Remote.

Source File DirectoryTake the default setting.

File Match Case SensitivityTake the default setting. The default is Ignore Case.

Error File DirectoryTake the default setting.

In Progress File DirectoryTake the default setting.

File Access Check TimeTake the default setting. The default is 60.

Receiver Flow DefinitionTake the default setting.



Receiver File NameTake the default setting.

Receiver DataTake the default setting.

Receiver Startup TypeTake the default setting.

Service: Supply the following information in the Service section only if you are not usingPingFederate. This content must be populated if Landmark is the IDP.



Home Page URLEnter the home page URL provided by the LMS team.

Login Page URLEnter the Login Page URL provided by the LMS team.

Logout URLEnter the Logout URL provided by the LMS team.

Frame AncestorsEnter the URL of the Infor Ming.le host.

X Frame OptionsEnter the URL of the Infor Ming.le host.

6 Click OK.

Create LMS configuration parameters manually1 If you are not logged into Infor Global HR as an administrator, log in.


appears, click in the Key column, specify LMS and then press Enter.




KeyEnter LMSDORCHESTRATION.WSI.ENDPOINT



TypeSelect URL

LengthEnter 256.





KeyEnter LMS_AdminHomePage

TypeSelect URL

LengthEnter 256.





KeyEnter LMS_HomePage

TypeSelect URL

LengthEnter 256.







KeyEnter LMS_WebServiceEndpoint

TypeSelect URL

LengthEnter 256.



Configure Infor Talent Science (TS)If the customer uses Infor Talent Science, perform configuration tasks in this section as required.

Do not perform this configuration if your customer does not use TS.


The configuration can be performed any time after TS is deployed in MT CSP and added to TAM inMT CSP.

Note: If your deployment has Symmetry integration, also follow the steps in Configure Symmetry towork with Talent Science on page 75 after you configure Global HR.

Verify Talent Science integration1 In Infor Global HR, log in as an administrator.


a Search for ConfigurationParameter. From the Configuration Parameters List, click the Searchicon and, when the row for filtering appears, click in the Key column, specify TS and then pressEnter.


• TSASSESSMENTORDER.WSI.ENDPOINT• TSASSESSMENTORDER.WSI.TIMEOUT• TSASSESSMENTORDER.WSI.WSDL• TSASSESSMENTSTATUSREQUEST.WSI.ENDPOINT• TSASSESSMENTSTATUSREQUEST.WSI.TIMEOUT• TSASSESSMENTSTATUSREQUEST.WSI.WSDL• TSASSESSMENTUPDATE.WSI.ENDPOINT• TSASSESSMENTUPDATE.WSI.TIMEOUT• TSASSESSMENTUPDATE.WSI.WSDL



• TSORCHESTRATION.WSI.ENDPOINT• TSREQUISITIONCREATION.WSI.ENDPOINT• TSREQUISITIONCREATION.WSI.TIMEOUT• TSREQUISITIONCREATION.WSI.WSDL• TSManualRequest


tasks in this section. Configure Talent Science configuration parameters manually on page68.

3 Verify orchestration data for TS and update if necessary.



b For TS, verify that:

• The Pillar/Integration column shows TS.• The Organization column shows the correct HROrganization for the customer.• The Get Status column shows SUCCESS.• The Get Error String column shows OK.• The Set Status column shows SUCCESS.

c If TS is listed in the Pillars/Integration column, continue with substep 3d. If TS is not listed, thereason might be that it was never added or it was added but contained errors. Contact CloudOpsto determine which situation has occurred.• If the application was not added, CloudOps must add it.• If it was added but contains errors, attempt to fix the errors by performing the rest of the



e Click TS and from the page that appears, click Organization and select your HROrganizationfrom the drop-down list.

f Click Save.g From the menu, click Actions > Get TS Orchestration.



The Status field should show "SUCCESS 200" and the Message field should show "OK." Ifyou received the success message, continue with step 3h. If you did not receive the successmessage, contact your TS team.

h If you received a SUCCESS 200 message for the Get operation, click Actions > Set TSOrchestration.The Status field should show "SUCCESS 200" and the Message field should show "OK." If itdoes, continue with step 4. If it does not, contact your TS team.

4 Click Actions > Configure TS Interface and verify that the fields on the page are populated.If the fields are populated, you have completed configuring TS. If the fields are not populated, youmust configure TS manually by performing the remaining steps in this section.


Organization Talent Science Configuration

Partner CodeTake the default setting. This field populates after the GET/SET has been run in CloudSuite Portal.

Partner Company CodeTake the default setting. This field populates after the GET/SET has been run in CloudSuite Portal.

User NameEnter the user name for the person with administrative access in both TS and Infor Global HR.

PasswordEnter the password for the person with administrative access in both TS and Infor Global HR.

Configuration Parameters

Assessment Order WSI EndpointTake the default setting.

Assessment Order WSI WSDLTake the default setting.

Assessment Update WSI EndpointTake the default setting.

Assessment Update WSI WSDLTake the default setting.

Assessment Status Request WSI EndpointTake the default setting.

Assessment Status Request WSI WSDLTake the default setting.

Service: Supply the following information in the Service section only if you are not usingPingFederate. This content must be populated if Landmark is the IDP.

TS ServiceTake the default setting.



Service TypeTake the default setting. The default is Form Based.

VersionTake the default setting.

Service ProtocolTake the default setting. The default is HTTPS Only. The Is Reference checkbox should bechecked.

Reference Service NameTake the default setting. The default is SSOPV2.

FQDN/TS ServerEnter the name of your FWDN/TS server.



Home Page URLEnter the home page URL provided by the TS team.

Logout URLEnter the Logout URL provided by the TS team.

SSO ProtocolTake the default setting. The default is SAMLv2.0.

6 Click OK.

Configure Talent Science configuration parameters manuallyPerform this task only if Talent Science configuration parameters have not been configured throughCSP and must be created manually.

1 If you are not logged into Infor Global HR as an administrator, log in.


appears, click in the Key column, specify TS and then press Enter.






KeyEnter TSASSESSMENTORDER.WSI.ENDPOINT

TypeSelect URL

LengthEnter 256.





KeyEnter TSASSESSMENTORDER.WSI.TIMEOUT

TypeSelect Numeric

LengthEnter 20.

ValueEnter 100.




KeyEnter TSASSESSMENTORDER.WSI.WSDL

TypeSelect URL

LengthEnter 256.







KeyEnter TSASSESSMENTSTATUSREQUEST.WSI.ENDPOINT

TypeSelect URL

LengthEnter 256.




KeyEnter TSASSESSMENTSTATUSREQUEST.WSI.TIMEOUT

TypeSelect Numeric

LengthEnter 20.

ValueEnter 100.




KeyEnter TSASSESSSMENTSTATUSREQUEST.WSI.WSDL

TypeSelect URL

LengthEnter 256.







KeyEnter TSASSESSMENTUPDATE.WSI.ENDPOINT

TypeSelect URL

LengthEnter 256.





KeyEnter TSASSESSMENTUPDATE.WSI.TIMEOUT

TypeSelect Numeric

LengthEnter 20.

ValueEnter 100.




KeyEnter TSASSESSSMENTUPDATE.WSI.WSDL

TypeSelect URL

LengthEnter 256.







KeyEnter TSORCHESTRATION.WSI.ENDPOINT

TypeSelect URL

LengthEnter 256.




KeyEnter TSREQUISITIONCREATION.WSI.ENDPOINT

TypeSelect URL

LengthEnter 256.





KeyEnter TSREQUISITIONCREATION.WSI.TIMEOUT

TypeSelect Numeric

LengthEnter 20.

ValueEnter 100.






KeyEnter TSREQUISITIONCREATION.WSI.WSDL

TypeSelect URL

LengthEnter 256.




ComponentEnter talentscience

KeyEnter TSManualRequest

TypeSelect Boolean

LengthDefault of 1 is auto-populated.

ValueEnter true


Create the actor for Talent Science integrationCreate an actor for Talent Science integration in Global HR.





ActorEnter tsuser.

Family NameEnter tsuser.



Given NameEnter tsuser.

Preferred NameEnter tsuser.


Create the identity for Talent Science integrationCreate an identity for the Talent Science integration in Global HR.


2 In the search field in the top right corner, enter Identity. Open the Identity business class.

3 From the Actions drop-down menu, choose Create Form-Based Identity.



UsernameEnter tsadmin1.

PasswordEnter the password.


Create the identity-actor link for Talent Science integrationCreate the identity-actor link for the Talent Science integration in Global HR.



3 Click the Identity tab.

4 From the Actions drop-down menu, choose Assign Existing Identity To Actor.5 Specify this information:


IdentityEnter tsuser.




Post-orchestration tasksPerform final orchestration tasks.

Note: Only perform tasks for applications and integrations relevant to your deployment.

Configure Symmetry to work with Talent ScienceTalent Science is used as a pass-through to receive completed PDFs from Symmetry.

Note: Only perform this task if your deployment uses Symmetry.

1 In , log in as an administrator.

2 Open the Talent Science application.

3 Select Create a Partner Company.

4 Name the pass-through company.


Partner Company CodeEnter the tenant name.

DomainEnter the domain name.

URLEnter the URL for the Landmark pass-through. The URL is in the format https://adecopper.peopleanswers.com/pa/partnerLandmarkPassthru.do?partnerCompanyCode=[tenant] where [tenant] is the name of your tenant.

Postback UsernameEnter the username provided by the TS team.

Postback PasswordEnter the password provided by the TS team.

WS Target LocationEnter https://ws.symmetry.com/spf-ws/

API UsernameEnter the API username provided by the Symmetry team.

API PasswordEnter the API password provided by the Symmetry team.

Authentication TypeEnter the authentication time specified by the Symmetry team.

Data AreaEnter hcm.



URLEnter the receiver URL in the format https://adm-[tenant]-ax1.tam.awsdev.infor.com/hcm/soap/ldrest/SymmetryPostbackReceiver/Create_SymmetryPostbackReceiver_FormOperation/ where [tenant] is the name of your tenant.



Part V: User / employee provisioning


User / employee provisioning

Chapter 9: General information

Data privacy conventionsThe European Union has adopted data privacy standards, described by the General Data ProtectionRegulation, or GDPR. The GDPR unifies requirements for data protection for all individuals within theEuropean Union.

If you are required to be GDPR-compliant, do not use an Actor ID scheme that provides identifyinginformation, such as first name and last name. Use the privacy conventions that have been establishedat your site.

Terminology used in this sectionInfor Global HR provides automation for adding new employees to the CloudSuite. This documentrecommends using that automation when provisioning new users to the system. As a result, thisdocument users the term "users/employees" when referring to Infor Global HR.

Note: Sections that discuss adding users outside of Global HR as an alternative use the term "user."

Best practices for adding users/employeesUse this flowchart to determine the best method of adding your users/employees.


General information


General information

Chapter 10: Mass-loading information for existing users/ employees

Importing users into Infor OS CEThis topic provides basic information about loading Infor CloudSuite GHR and FSM users into InforOS CE. Additional details are in the Infor OS CE administration documentation.

1 Create a CSV or XML import file containing the user information to include. The CSV file mustcontain a header. For the supported format, see CSV import file details on page 81.

2 From Infor OS CE User Management, select the Import icon, which is a piece of paper with aright-pointing arrow.

3 Navigate to the location where the CSV or XML file is located and select it. The import results aredisplayed in a window after the import process is successfully completed. The Download Resultslink provides the results for each entry in the import file.

4 Optional. Verify that the users you added have also been added in Landmark. Wait a few minutesbefore checking for users in Landmark in order to give the user BOD time to process.

a Government Cloud customers, launch the CloudSuite multitenant Infor Rich Client by specifyinga server URL in this format: <prefix>-<customer>-<environment type>.<hosted zone>

where

• <prefix> = gen• <tenant> = the customer name• <environment type> = tst, stage, prd (and so on)• <hosted name> = tam.inforgov.com

Example:

gen-tenant-tst.tam.inforgov.com

b Other customers, launch the CloudSuite multitenant Infor Rich Client by specifying a serverURL in this format: https://gen-<tenant>-<type>. inforcloudsuite.com/canvas/

where


The domain name varies slightly in regions other than the US.



Mass-loading information for existing users / employees

Note: Internet Explorer users can use Infor Rich Client from within Infor OS CE to performthese steps.

c In Infor Rich Client, select User Management and perform a search to locate the user or usersto verify.

CSV import file detailsInfor Ming.le can accept import files in CSV and XML format.

This document describes using a CSV file for import. The file must contain a header. The requiredvariables in the header are shown in bold. Next to the header names are examples of what the columnshould contain. Other variables can be used if your installation requires them.

• FirstName: Jane• LastName: Doe. If FirstName is provided in the header, then LastName must also be provided.• EmailID: Required in header. Format is: [email protected]. If you need to correct the

EmailID field, it is editable through User Management. When you make a change to the EmailIDfield it will automatically update the user name.

• User Name: Format is: [email protected]• GenericProperty_ActorID: first.last• SecurityRole1, SecurityRole2, SecurityRole3,...SecurityRoleN: Names of user's roles, delimited

by commas

Mass loading actor context records using InforSpreadsheet DesignerFor some versions of CloudSuite products, actor context records, which are required information forall users, are not sent through user BODs. Customer administrators can use the Infor SpreadsheetDesigner (ISD) desktop tool to load these records.

Mass loading actor records using ISD requires knowledge of the Infor Spreadsheet Designer queryand upload tools.

If ISD is not installed on the computer that you plan to use to load context records, you can downloadit from Support Portal. Install the product following instructions in Infor Spreadsheet Designer forMicrosoft Excel Installation Guide.



Querying context property recordsIf you are mass-loading actor context property records into your CloudSuite system, you must querycontext property records to locate the unique ID and key field records. The results of the query areloaded in the next task.

Before you perform this procedure, the following structures must already exist:

• EnterpriseGroup• FinanceEnterpriseGroup• HROrganization• A Context Property must be created for each of them

1 If Excel is not running, launch it.

2 In Excel, select the Infor tab.

3 Select Insert Query.

4 Government Cloud customers, launch the CloudSuite multitenant Infor Rich Client by specifyinga server URL in this format: <prefix>-<customer>-<environment type>.<hosted zone>

where

• <prefix> = gen• <tenant> = the customer name• <environment type> = tst, stage, prd (and so on)• <hosted name> = tam.inforgov.com

Example:

gen-tenant-tst.tam.inforgov.com

5 Other customers (not Government Cloud), launch the CloudSuite multitenant system by specifyinga server URL in this format: https://gen-<tenant>-<type>.<domain>.com

where

• <tenant> = your tenant name• <type> = the type of tenant, for example, TST, STAGE, PRD• <domain> = the domain where your tenant is installed, typically, inforcloudsuite.com

6 Click Connect.7 Select the application data area for adding the actor context, either<tenant>_<type> ._fsm or

<tenant>_<type>._hcm.

where

• fsm is used for Infor CloudSuite Financials & Supply Manangement• hcm is used for Infor Global HR

8 On the Insert Business Class Query dialog box, select the Context Property business class.

9 Select the fields ContextProperty and KeyField and click Insert.10 Click Refresh to pull the data into the spreadsheet.

11 In the list of returned records, cut the KeyField column and insert it into column A. This makes thecolumn available for a VLookup which you will perform in the next task.

12 Name the tab ContextProperty. You are now ready to upload actor context records.



Uploading actor context recordsAfter you have compiled the actor context records, you must upload them to Infor Spreadsheet Designer(ISD).

1 From ISD, create a new tab and name it ActorContext.2 Click Insert Upload.

3 Select the application data area for adding the actor context, either <tenant>_<type>_fsm or<tenant>_<type>_hcm.

4 Specify these upload properties:

• Business Class: Select the Actor Context business class• Action: Select Create• Field Map: Select Actor,ContextProperty and Value

5 Add a column between ContextProperty and Value and name it ContextProperty.KeyField.

6 Click Reset Mapping.

7 Populate the spreadsheet with your list of actors and the data in ContextProperty.KeyField andValues. One way to do this is to add all actors for a single KeyField, then adding the vlookup formula(step 11), then adding all actors for the next KeyField and so on.

8 Add a formula to all fields in the ContextProperty column for a vlookup. Specify:=VLOOKUP([@[ContextProperty.KeyField]],LISTMAP_TABLEContextProperty,2,FALSE).

9 When all data is added, go to the Infor tab and click Upload.

10 Validate the records by launching Infor Rich Client or by going to the ActorContext list URL:https//gen-<tenant>-<type>.inforcloucsuite.com/fsm/web/List/ActorContext

Mass linking actor/agent records in Infor Global HR/TMThis topic explains how to use Infor Spreadsheet Designer to locate and upload existing Infor GlobalHR/TM information so that it can be imported to a multi-tenant CloudSuite.

1 In Infor Spreadsheet Designer, run a query of the Agent business class, selecting all fields.

2 Delete the query from within the spreadsheet.

3 Insert an Upload into the spreadsheet for the Agent business class.

4 Select Link to Actor as the action. This will add an additional field called Actor to the spreadsheet.

5 For each record, populate the Actor field with the relevant information.

6 Perform an Upload procedure.



Assign roles to CloudSuite Financials and SupplyManagement application page and context / utility appsThe steps in this section ensures that applications needed by the CloudSuite Financials and SupplyManagement have access to the roles required to display information.

Assign permission to the application pageUse this procedure to assign permissions to the FSM application.

1 Sign in to Infor Operating Service as an administrator.


3 Locate the CloudSuite Financials and Supply Management application and double-click to openthe Application Details page.

4 Click Add New Users or IFS Security Roles. The option name varies depending on the version ofInfor OS you are using.

5 Perform a search to locate the role Requester_ST. Select the role and click Done.

6 From the upper-right corner of the Application Details page, click Save.

7 When you are finished making updates on the page, click Cancel.

Assign permission to context / utility appsEach context / utility app has individualized security. Use this procedure to assign permissions to allcontext/utility apps that you want to use with Infor CloudSuite Financials and Supply Management.

1 From Infor Ming.le User Management, select User Menu > Admin Settings.

2 Move to the Manage Context / Utility Apps tab.

3 Select the context / utility app you want to work with, for example, Alerts, and then selectPermissions.

4 With Permissions selected, you can either choose either "Add New Users and/or IFS Roles" toindividually select users or "Grant access to all users" to automatically assign permission to allusers.

5 When you are finished assigning access for the currently selected context/utility app, select Save> OK.

6 Optional. Move to the Context Message tab and create a message for this app.

7 Repeat steps 3-7 for any other context/utility apps for which you want to grant access.



Troubleshooting user provisioning issuesIf users are not appearing in a system after you have performed an add user procedure, the sectionsthat follow provide instructions for how to begin troubleshooting.

Launching ION to view status of user BODs1 Perform the appropriate substeps for your tenant depending on whether it is multi- or single-tenant.

a Launch the multi-tenant CloudSuite Infor Rich Client by specifying a serverURL:https://gen-<tenant>-<type>. inforcloudsuite.com/canvas/

where


b Select the Infor Rich Client Admin RichClient64 (tenant_type) with no fsm or hcm after it. Forexample, https://<gen>-<tenant>-<type>.<domain>.com

a For single-tenant, navigate to ION Desk using the URL given to you by CloudOps.

2 Search for ION in the Infor Rich Client search box.

3 Select ION Inbox or ION Outbox. All records that have come into the Inbox or Outbox are displayed.

4 Access Async Administrator and review the queue messages. Locate entries with a current timestamp and review the status.

Troubleshooting outbound user BODsOutbound user BODs are those that are sent from:

• Multi- or single-tenant Landmark to Infor Ming.le• Single-tenant LSF to Infor Ming.le if the Email not required feature has not been enabled. (If Email

not required is enabled, LSF cannot send user BODs; it can only receive them.)

User BODs coming from LandmarkUser BODs published in Landmark and flowing to Infor OS can have the status shown in the table:

Meaning / Troubleshooting stepsION Outbox Status

New is a normal state for a user BOD when it is firstcreated.

New

A user BOD can become stuck in New status. If you believethis is the case for a BOD, access Async Administrator to



Meaning / Troubleshooting stepsION Outbox Status

review the ION Outbox queue for failed triggers. For anyTerminated Abnormally errors, try requeueing or deletingthem.

Sent is a normal state when a BOD moves successfullyfrom Landmark to the I/O Box.

Sent

A user BOD can become stuck in Sent status. This canhappen if the flow is not set to Active or if the connectionpoints in the flow are not correctly set up. In ION, navigateto Connect > Data Flow and check the flow for Landmarkto Infor OS. Correct the flow as needed.

The user BOD was picked up by ION and sent to Infor OS.To view more information about the BOD, use IONOneView in ION Desk.

Processed

Outbound user BODs coming from Landmark: Issues to check

The most common reasons for issues when user BODs are going from Landmark to Infor Ming.le areshown in the table:

What to checkProblem

Verify that the unsent Actors have an email addressand an identity on the primary authentication service.These attributes are required for the Send BOD for AllActors action.

Process.SecurityUserMaster BOD is notcreated for some Actors when Send BODfor All Actors is used.

• Use ION Desk OneView to verify that the BODwas sent to Infor Ming.le.

• Use ION Desk to check for Confirm or Error BODs.• Review the Process.SecurityUserMaster BOD to

make sure that roles assigned to the user exist inInfor Ming.le.

A user BOD was processed but the user ora role for the user was not created or updat-ed in Infor Ming.le.

Make sure that Infor Mingle Create action was usedto create the Actor. This action is the only method thatwill generate the Process.SecurityUserMaster BOD.

Process.SecurityUserMaster BOD is notcreated when an Actor is created.




The update must include changes to any of the follow-ing attributes for an Actor:

• First Name• Last Name• Email• Roles

A Process.SecurityUserMaster BOD is generated onlyif one of these attributes is updated.

Verify that the attribute IsMingleUser is set to true.You can do this by adding the IsMingleUser attributeto the Actor List view.

Process.SecurityUserMaster BOD is notcreated when an Actor is updated.

Another reason for the Process.SecurityUserMasterBOD to not be generated is if the Actor is not a userin Infor Ming.le. Check this by:

• Verifying that the attribute IsMingleUser is set totrue. You can do this by adding the IsMingleUserattribute to the Actor List view.

• Making sure the Actor has been assigned the se-curity class PersonalizationAccess_ST.

The Actor is not set up as an Infor Ming.leuser.

If you receive this message after attempting to add ordelete Landmark user roles, the most likely reason isthat a temporary processing mismatch occurred inION. This is a normal situation that will correct itself.You can ignore the message.

Error message: Cannot process BODas Variation ID [#] must begreater than current VariationId [#]

User BODs coming from single-tenant LSFIn a hybrid deployment, it might be necessary to troubleshoot user BODs coming from LSF to InforMing.le. Outbound LSF user BODs can have the statuses shown in the table.

Meaning / Troubleshooting stepsION Status

New is a normal state for a user BOD when it is firstcreated.

New

A user BOD can be stuck in New status. If you believe thisis the case for a BOD, access ION Desk OneView to viewthe status.

Sent is a normal state when a BOD moves successfullyfrom LSF to the I/O Box.

Sent

A user BOD can become stuck in Sent status. This canhappen if the flow is not set to Active or if the connectionpoints in the flow are not correctly set up. In ION, navigate



Meaning / Troubleshooting stepsION Status

to Connect > Data Flow and check the flow for LSF toInfor Ming.le. Correct the flow as needed.

The user BOD was picked up by ION and sent to InforMing.le. To view more information about the BOD, use IONOneView in ION Desk.

Processed

Note: If you receive the message, Cannot process BOD as Variation ID [#] must begreater than current Variation Id [#], after attempting to add or delete Landmark userroles, the most likely reason is that a temporary processing mismatch occurred in ION. This is a normalsituation that will correct itself. You can ignore the message.

Troubleshooting inbound user BODsInbound user BODs are sent from Infor Ming.le to Landmark or single-tenant LSF.

User BODs coming to LandmarkUser BODs coming from Infor Ming.le to Landmark can have the statuses shown in the table:

Meaning / Troubleshooting stepsION Inbox Status

The user or role assignment was successfullycreated or updated in Landmark.

Processed

Access Async Administrator to review the IONInbox queue for failed triggers. For any

Unprocessed

Terminated Abnormally errors, try requeueing ordeleting them. If the Terminated Abnormallystatus returns, the cause of the errors must beinvestigated.

Perform the same steps as for Unprocessedabove. In this case, it might be necessary to

Failed

review the user BOD that was sent for a problemwith the record in IFS / Infor Ming.le UserManagement. If this is the case, resolve the issueand retrigger the user BOD.

Use ION Desk to check for Confirm or ErrorBODs.



Inbound user BODs coming to Landmark: Issues to check

The most common reasons for issues with user BODs that are coming to Landmark from Infor Ming.leare shown in the table:


• Review the Sync.SecurityUserMaster BODto make sure the ActorID property is populat-ed.

• If the ActorID property is missing, enableCreate Users in Draft Mode and make theActorID property required in Infor Ming.le.

Actor is not being created in Landmark.

Make sure that the Infor Ming.le attribute IsMin-gleUser is set to true for the Actor. This attributeis required in order for an Actor to be updated.

Actor is not being updated in Landmark.

Review the Sync.SecurityUserMaster BOD andmake sure that roles assigned to the user havethe correct Landmark LID.

ActorRoles is not being updated in Landmark.

If you receive this message after attempting toadd or delete Landmark user roles, the mostlikely reason is that a temporary processing mis-match occurred in ION. This is a normal situationthat will correct itself. You can ignore the mes-sage.

Error message: Cannot process BOD asVariation ID [#] must be greaterthan current Variation Id [#]

User BODs coming to LSFIf you are troubleshooting the status of a user added in Infor Ming.le that has not arrived in LSF asexpected, use the LSF jobs administration menus to view the status of all jobs.

The most common problem is that a job in Needs Recovery status is blocking other jobs from processing.The following are the basic steps. For complete details about troubleshooting Needs Recovery jobs,see your LSF administration documentation set.

1 As a Portal administrator, log in and navigate to the administration tools.2 Select Bookmarks > Jobs and Reports > Multi-Step Job Definition.3 Navigate to Job Schedule and click the Waiting Jobs tab to see if readinbox jobs are listed.4 If a job in the queue is in Needs Recovery status, delete all but one of the waiting readinbox jobs.

This enables any other waiting jobs to process. Then delete the one in needs recoveryNote: If you receive the message, Cannot process BOD as Variation ID [#] must begreater than current Variation Id [#], after attempting to add or delete Landmark userroles, the most likely reason is that a temporary processing mismatch occurred in ION. This is a normalsituation that will correct itself. You can ignore the message.



LSF and Landmark customers: Additional userprovisioning stepsIf you use LSF and single tenant Landmark, you must perform additional steps for users who requireidentities on LSF. Single-tenant Lawson System Foundation additions: Add required identities for newemployee/user records on page 107



Chapter 11: Configuring user/employee provisioningthrough Global HR

GHR user / employee provisioning configurationDuring a hire, the employee’s actor can be created. The associated roles, agent and actor context willbe created at the same time. The actor roles will be created for the user based on Hire/Positionparameters.

The process used to configure user provisioning varies from deployment to deployment, dependingon implementation type.


Configuring user/employee provisioning through Global HR

Configure user provisioning information for automationHire forms can create the actor. Use this section to specify how users are provisioned.

IMPORTANT: When making selections for Provision During options, if all the three of the followingoptions are de-selected, automated user provisioning through Global HR or Talent Acquisition is notenabled and all other options in the Hire section are unavailable.

• Provision During Hire• Provision During Rehire• Provision During Import

If you want to use automated user provisioning, you must select at least one of the Provision Duringoptions.

1 Select Administrator > Setup > User Provisioning.

2 On the User Provisioning tab, select the relevant check boxes.• Organization: Determine user provisioning configuration by organization.• Provision Actor During Hire: Create user provisioning during hire.• Provision Actor During Rehire: Optional. Create user provisioning during rehire. All user

provisioning fields available on the Hire form are now available on the Rehire form. If the actoris disabled, it is enabled by this action.

• Provision During Import: Create user provisioning during employee import. When this optionis selected, the user can specify two default roles assigned to imported employees.

• Use Employment ID as Actor: Optional. Use an employment ID to create the actor. Whenthis flag is not selected, the administrator must manually specify a value in the Actor field, forexample, a username, on the hire/rehire form.

• Use Mingle Create: Optional. This option creates a user in Infor OS CE. User security BODconfiguration is required to use this option.

• Use Employment ID As Mingle ID: Optional. Use an employment ID to create the Infor Ming.leID for the actor. When this flag is not selected, the administrator must manually specify a valuein the Mingle ID field, for example, a username, on the hire/rehire form.Note: The Use Employment ID As Mingle ID field appears on the GHR user provisioningconfiguration page only if the optional Email not required feature has been enabled. In addition,if the Email not required feature has been enabled and the flag for this field is enabled, theEmployment ID will be defaulted on the hire/rehire form. More information about the Email notrequired feature is in Chapter 12, "Optional: Make Email not required for user records."

• Number Of Roles On Form: Allow up to 20 roles on the hire/rehire form.• Default Roles: Configure up to two default roles. These roles can be used on the hire/rehire

form during the entry of hire data, and in Employee Import.• Create Organization User Context: Optional. Create the User Context during the hire/rehire

process, or in Employee Import.• Create Job Board User Context: Optional. Set the user's Job Board context during the

hire/rehire process, or in Employee Import.• Default Job Board: Choose the default Job Board assigned to users. This Job Board is used

during the hire/rehire process, and in Employee Import.• Use Position Roles: Optional. Use position roles in hire/rehire process, or in Employee Import.

When this option is unchecked, the position roles options are unavailable.



• Update Employees With Position Role Changes: Optional. When position roles are changed,updates employee records with the changes.

• Create/Remove Roles During Transfer And Promote: Optional. Creates and removes rolesduring the process of transferring or promoting an actor. Old default roles that do not apply tothe new position are removed. New default roles are applied to the actor.

• Create Roles During Add Work Assignment: Optional. Creates roles during theAddWorkAssignment action. New default roles are added to the actor. Existing default rolesare not removed.

Setting up position rolesSet up position roles in the User Provisioning menu.


2 In the Position Roles tab, assign roles to specific positions.

The roles defined in the Position Roles tab are available on the hire/rehire form and in WorkAssignment Import. You can configure up to 20 position roles in the hire/rehire form. These rolescan be changed during the hire/rehire process.

Viewing pending user / employee provisioning recordsWhen a future hire is performed and user provisioning is turned on, a pending user provisioning recordis created.


2 In the Pending Provisioning tab, you can view the actors waiting to be provisioned.When the future hire becomes current, all user roles are automatically provisioned. The pendingrecord is then deleted.

ResourcesA resource is a person who has a relationship with the organization. You create the resource relationshipswhen you set up your organization, and then assign those relationships to resources as they are added.Resources can be:

• Employees

• Volunteers

• Contractors



• Seasonal workers

• Retirees

• External recruiters

• External instructors

When you create your organization's structure, you determine certain global resource rules such asthese:

• Whether the application assigns employment IDs.

• The starting employment ID.

• Whether duplicate personal identification numbers (not employment IDs) are allowed.

Creating relationships to the organizationThe resource relationship determines the relationship a resource has with the organization; for example,employee, volunteer, seasonal, contractor, external recruiter, external trainer, and so on.

Note: Anyone who performs work for the company in any capacity must be defined as a resource.

1 Select Administrator > Set Up > Resource Components > Resource Relationships.

2 On the Relationships To Organization tab, click Create, and specify this information:

Effective Date

Required. Specify the effective date.

Relationship to Organization

Required. Specify the name of the resource relationship to the organization; for example, employee,volunteer, seasonal, contractor, external recruiter, external instructor, and so on.

Description

Specify a description for the relationship. If left blank, the relationship to organization defaults inthis field.

Active

Select this check box to make the relationship to organization active. The relationship to organizationis active by default. Clear the check box to inactivate it.

Relationship Type

Required. Select the relationship type.

Candidate Display Indicator

Specify whether this field is visible to candidates. Leave blank (the default) to always display thisrelationship.



3 Click Save.

Creating relationship statusesUse this procedure to define relationship statuses, which indicate the state of the relationship toorganization. For each relationship to organization, define all of the statuses that are valid for therelationship, individually.

1 Select Administrator > Set Up > Resource Components > Resource Relationships.

2 Click the Relationship Status tab.

3 Click Create, and specify this information:

Relationship to Organization

Required. Select the relationship for which to define a status.

Effective Date

Required. Select the date on which the relationship status becomes effective.

Relationship Status

Required. Specify the relationship status. For example, an employee can be active, on leave, orterminated. A contingent worker might only be active or terminated. A consultant might simply beactive or inactive.

The Relationship to Organization field helps determine the relationship statuses you must define.Your organization might want to have unique relationship statuses for distinguishing these typesof situations:

• An employee who is on leave, but still receiving pay and benefits, versus an unpaid leave• A terminated employee from an employee on severance• Types of leaves (such as family leave or military)• Employees who are eligible for their data to be purged

Description

Specify a description for the relationship status.

Active

Select the Active check box to make the relationship status active. The relationship status is activeby default. Clear the check box to inactivate it.

Headcount

Select how the relationship status is considered in headcounts.

Note:

Headcounts are used in employee turnover reports and, if applicable, in position budget counts.

Select Active to include resources with this status code in headcounts.

Select Not Active to include resources with this status code in headcounts. Use a Not Activecount value for an extended leave of absence, such as short term disability.



Select Excluded to exclude resources with this status code from headcounts.

Inactivate Work Assignment

Select this check box if you want a resource to no longer work on their current work assignments(for example an inactivated, suspended, or terminated resource).

Select this check box if you want work assignments associated with a resource that changes tothis relationship status to be automatically inactivated.

Note:

If you change the resource from a relationship status where work assignments have been inactivatedto another relationship status that has this check box unchecked, you must reactivate manuallyany work assignments that you still want assigned.

Purge EligibleSelect this check box if you want an employee with this relationship status to be eligible for theirdata to be purged or anonymized.

Actor and Roles

Select an option from the drop-down menu to indicate the actions taken when an employee ismoved to the relationship status.

Select No Changes for nothing to be done to the actor or role for that employee.

Select Inactivate Actor to deactivate the actor linked to that employee. The roles remainunchanged.

Select Delete Roles to delete the roles that are tied to the actor. The actor remains active. Ifsecurity BOD processing is enabled, this action causes a BOD to be published. Infor FinancialServices processes the BOD and deletes the user roles corresponding to the actor role.

Select Inactivated Actor And Delete Roles to deactivate the actor is deactivated anddelete the roles.

End Bank Details

HIPAA Employment Code

4 Click Save.



Chapter 12: Adding new users / employees individuallythrough Global HR

Use Global HR to add new users/employeesAll customers who run Global HR under Infor OS CE can add new users through the Global HRadministration menus. Infor recommends all customers use this method, including Cloudsuite Financials& Supply Management customers who use the Global HR application only for adding Employee records.This is because Global HR simplifies some aspects of adding new users through its automatedprocesses. Information about adding users through Global HR is in another section. Creating a singleuser/employee in Global HR on page 97

CloudSuite Financials & Supply Management customers who prefer to add Actors through other methodscan do so. Instructions are in this document.

Creating a single user/employee in Global HRThis topic describes how to submit a request to route a single new resource for approval.

Note: Only fields that are required by default are called out as such in this task. Your administrator canconfigure settings to mark other fields as required. For more information, see the Infor Global HumanResources and Talent Management User Guide.

1 Access Infor Global Human Resources. In the Infor Global HR web application, select Administratorfrom the top left drop-down menu. In the right corner of the application, select More ... > Resources> Hire a Resource.The Request To Hire A Resource window appears.

2 Specify initial information:

Effective DateRequired field. Click the calendar icon in the field to select the start date for this resource.

ReasonClick the search icon in the field to specify the reason for the resource addition.

Resource Being ReplacedClick the search icon in the field to specify the resource being replaced.


Adding new users / employees individually through Global HR

Employment IDRequired field. Click the search icon in the field to specify the employment ID.

3 Specify Name information:

First NameRequired field. Specify the new resource's first name.

Middle NameSpecify the new resource's middle name.

Last NameRequired field. Specify the new resource's last name.

SuffixSpecify the suffix to the new resource's name.

Professional DesignationSpecify the new resource's professional designation.

Preferred First NameSpecify the new resource's preferred first name.

Preferred Last NameSpecify the new resource's preferred last name.

4 Specify General information:

Home CountrySpecify the new resource's home country. This field defaults to the organization's home country.

Relationship To OrganizationRequired field. Click the search icon in the field to specify the new resource's relationship to theorganization.

Relationship StatusRequired field. Click the search icon in the field to specify the status of the new resource'srelationship to the organization.

Work TypeClick the search icon in the field to specify the new resource's work classification.Select the Working Remotely checkbox to indicate the new resource will be working remotelyfrom the organization.

Legacy Employment NumberSpecify the new resource's legacy employment number, if it exists.

5 Specify Hire Source information:

SourceSelect the source of the new resource from the drop-down menu.



Specific SourceThis field is populated by the choice in Source. To change the entry, click the specific source ofthe new resource from the drop-down menu.

Referring SourceSpecify the source that referred the new resource, if it exists.

6 Specify Personal Information:

Identification NumberThe first field defaults to the organization's home country. Click the search icon in the field tospecify the country, if necessary. Then specify the new resource's identification number.

Issue DateClick the calendar icon in the field to specify the identification issue date.

Expiration DateClick the calendar icon in the field to specify the identification expiration date.

GenderSelect the gender of the new resource from the drop-down menu.

EthnicitySelect the ethnicity of the new resource from the drop-down menu.Select the Hispanic Or Latino Origin checkbox to clarify the new resource's ethnicity.

NationalitySelect the nationality of the new resource from the drop-down menu.

Nationality CountrySelect the nationality country of the new resource from the drop-down menu.

Veteran CodeClick the search icon in the field to specify the new resource's veteran code, if it exists.

Protected Veteran StatusSelect the protected veteran status of the new resource from the drop-down menu.

Marital StatusSelect the marital status of the new resource from the drop-down menu.

BirthdateClick the calendar icon in the field to specify the new resource's birth date.

Point Of OriginClick the search icon in the field to specify the new resource's point of origin.

7 Specify Dates information:

Start DateRequired field. Click the calendar icon in the field to specify the new resource's start date.



Adjusted Start DateClick the calendar icon in the field to specify the new resource's adjusted start date.

First Date WorkedClick the calendar icon in the field to specify the new resource's first day.

AnniversaryClick the calendar icon in the field to specify the new resource's anniversary date.

SeniorityClick the calendar icon in the field to specify the new resource's seniority.

8 Specify Work Assignment information:

Assignment TypeSelect the new resource's assignment type from the drop-down menu.

PositionRequired field. Click the search icon in the field to specify the new resource's position.

JobThis field is populated by the choice made in the Position field.

Legal EntityClick the search icon in the field to specify the new resource's legal entity.

Cost CenterClick the search icon in the field to specify the new resource's cost center.

ProjectClick the search icon in the field to specify the new resource's project.

LocationClick the search icon in the field to specify the new resource's location.

Preferred Job TitleThis field is populated by the choice in the Position field. Specify the new resource's preferredjob title, if necessary.

Work ScheduleSelect the new resource's work schedule from the drop-down menu.

ShiftSpecify the new resource's shift, if necessary.

UnionSelect the new resource's union affiliation from the drop-down menu.

Bargaining UnitSelect the new resource's union bargaining unit from the drop-down menu.

9 Specify Manager Information:



Direct ManagerRequired field. Click the search icon in the field to specify the new resource's direct manager.

Dotted-Line ManagerClick the search icon in the field to specify the new resource's dotted-line manager.

Is A ManagerClick the search icon in the field to specify the type of manager, if the new resource is a manager.

10 Specify Provisioning information:

ActorRequired field. Specify the new resource's actor ID. If Infor Global Human Resources is configuredto use the employment ID as the actor ID, this field is pre-populated.

RolesClick the search icon in the fields to specify the new resource's roles. The number of fields in thissection limit the number of roles you can assign to the new resource.

11 Specify Trial Period information:

Trial PeriodSelect the new resource's trial period duration from the drop-down menu.

Trial Period End Date OverrideClick the calendar icon in the fields to specify the end of the new resource's trial period, if the datedoes not correspond to the date calculated by the Trial Period field.

12 Specify Payroll information:

Primary Payroll CountryClick the search icon in the field to specify the new resource's primary payroll country.

Payroll ProviderClick the search icon in the fields to specify the new resource's payroll provider.

Tax informationSpecify the Tax Group.Click the search icon in the fields to specify the new resource's Primary Work State, WorkersCompensation State, and Primary Tax Province.

Tax authoritiesSpecify the new resource's Primary Work County, Primary Work City, Resident City, and UserLevel. Select the new resource's Automatic Time Record and Automatic Deposit from thedrop-down menus. Specify the tax Amount.

Time record thresholdsSpecify the new resource's Percent Above, Amount Above, and Hours Above.

ProjectClick the search icon in the field to specify the new resource's project.

13 Specify Compensation information:



Pay RateSpecify the new resource's pay rate.

Pay Rate CurrencyClick the search icon in the field to specify the currency used for the pay rate.

Step And Grade ScheduleClick the search icon in the field to specify the step and grade schedule to be used for the newresource.

GradeClick the search icon in the field to specify the new resource's compensation grade.

StepClick the search icon in the field to specify the new resource's compensation step.

Pay Rate TypeSelect the new resource's pay rate type from the drop-down menu.

Number Of MonthsSpecify the number of months for the new resource's compensation.

Pay FrequencySelect the new resource's pay frequency from the drop-down menu.

Payment ScheduleClick the search icon in the field to specify the new resource's payment schedule.

Full Time EquivalentSpecify the new resource's full-time equivalency.

Full Time Annual HoursSpecify the new resource's full-time annual hours.

Exempt From OvertimeSelect the new resource's overtime exemption status from the drop-down menu.

14 Specify Pay Elements information:

This section contains the pay element groups for the new resource. To add a pay element group,click Add and provide the compensation information.

15 Specify Compensation Analysis information:

Salary StructureClick the search icon in the field to specify the new resource's salary structure.

Geographic Differential CodeClick the search icon in the field to specify the new resource's geographic differential code.

Salary Structure GradeClick the search icon in the field to specify the new resource's salary structure grade.

16 Specify Other Amounts information:



This section contains other monetary amounts for the new resource. To add an amount, specify anumber, and click the search icon in the field beside it to specify the amount's currency.

17 Specify Other Pay information:

This section contains the other pay rate groups for the new resource. To add a pay rate group,click Add and provide the pay rate information.

18 Specify Allowances information:

This section contains the allowance groups for the new resource. To add an allowance group, clickAdd and provide the allowance information.

19 Specify Work Assignment Comments information:

This section contains comments on the new resource's work assignment. Enter any comments inthe field provided.

20 Specify Contract information:

Reason For ContractClick the search icon in the field to specify the reason for the new resource's contract.

Contract TypeSelect the new resource's contract type from the drop-down menu.

Contract NumberSpecify the new resource's contract number.

Begin DateClick the calendar icon in the field to specify the new resource's contract start date.

DurationSpecify the duration of the new resource's contract. Select the duration units from the drop-downmenu.

End DateClick the calendar icon in the field to specify the new resource's contract end date.

Contracted TimeSpecify the contracted time. Select the time units and frequency from the drop-down menus.

Contractual FTESpecify the contractual FTE from the drop-down menu.

Renewal Notification DateClick the calendar icon in the field to specify the new resource's contract renewal notification date.

Renewal DateClick the calendar icon in the field to specify the new resource's contract renewal date.

21 Specify Address information:

CountryClick the search icon in the field to specify the new resource's country. This choice opens up thefollowing fields. Some fields are dependent on the country chosen.



Street AddressSpecify the new resource's street address.

CitySpecify the new resource's city.

State/ProvinceClick the search icon in the field to specify the new resource's contract state or province.

Post CodeSpecify the new resource's postal code.

RegionClick the search icon in the field to specify the new resource's region.

County/DistrictClick the search icon in the field to specify the new resource's county or district.

22 Specify Contact Information:

Country CodeClick the search icon in the field to specify the country code for the new resource's phone number.

Phone NumberSpecify the new resource's phone number.

Ext.Specify the new resource's phone number extension.Select the Preferred Phone Contact checkbox to indicate that this number is the new resource'spreferred phone number.Select the Used As Work Phone checkbox to indicate that this number is the new resource'swork phone number.

Email AddressRequired field. Specify the new resource's email address.Select the Preferred Email Contact checkbox to indicate that this address is the new resource'spreferred email.Select the Used As Work Email checkbox to indicate that this address is the new resource's workemail.

Alternate Email AddressSpecify the new resource's alternate email address.Select the Preferred Email Contact checkbox to indicate that this address is the new resource'spreferred email.Select the Used As Work Email checkbox to indicate that this address is the new resource's workemail.

23 Specify Benefit Enrollment information:

Enrollment EventClick the search icon in the field to specify the event that triggered the new resource's benefitenrollment.



Event DateClick the calendar icon in the field to specify the effective date for the new resource's benefits.

24 Specify Action Comment information:

This section contains comments on the new resource's hire action. Enter any comments in thefield provided.

25 Specify Attachment information:

This section contains other attachments for the new resource. To add an attachment, specify adescription of the file, then click the file icon in the field beside it to find and attach the file.

26 Click Submit. You are now ready to perform verification and other final steps. Verifying andcompleting the new hire request on page 105

Verifying and completing the new hire requestWhen the hire request was submitted, it was likely routed through an approval process. When theapprovals are complete, you can finish adding the employee.

1 Verify that the approvals are completed. In Infor OS CE, access My Actions and select the MyOpen Request Actions tab.

2 If you want to bypass the approval process, right-click the Hire Resource request and chooseManual Complete.

3 Select Resources > Resources.

4 Search for the name of the employee you added and verify that it appears.

Import employees into Infor Global HRThis topic lists the steps for importing employees into Infor Global HR. For more context and details,see the Infor Global HR and Talent Management Data Load Guide.

When you mass-load employees into Infor Global HR, you must:

• Create a data load file in the proper format• Load the data into a staging table• Load the staged data into Infor Global HR

Note: After you have imported employees with Employee Import, you can import work assignments.For more information on Work Assignment Import, see the Infor Global HR and Talent ManagementData Load Guide.



Creating the data load fileThis topic contains basic steps for creating the data load file necessary for uploading employees toInfor Global HR. For more context and details, see the Infor Global HR and Talent Management DataLoad Guide.

1 Using the file layout provided with the Infor Talent Management File Layouts spreadsheet, (whichcan be obtained from the Infor Support Portal), create Excel files, and save them in CSV format.Save the file as EmployeeImport.csv.

2 Optional: To minimize processing time, add a column to the spreadsheet with the label "DataImport"and set the value to "true". The data load then skips the step for building the index for the importeddata and improves data load performance time.

Note: After you have imported data with a spreadsheet with the DataImport column set to "true,"you must go to the Rebuild Maintenance menu and run the rebuild programs available under Admin> Utilities. See the Infor Global HR and Talent Management Data Load Guide for information aboutthis process.

Loading the employee data into a staging tableThis step in the process is load employee data into a staging table. There are multiple ways to do this.You can:• Use the Landmark Administration Console to run an import procedure. Instructinos are in Landmark

Administration Console Configuration and User Guide which is available in your infocenter.• Make a request to your CloudOps team to load the data for you. Use the Landmark Administration

Console to run an import procedure. Instructions are in Infor Global HR and Talent ManagementData Load Guide which is available in Infor Xtreme.

Loading employee records into Infor Global HRThis topic provides basic information about loading employee records into Infor Global HR. Additionalcontext and details are in the Infor Global HR and Talent Management Data Load Guide.

1 Log in to Infor Global HR as an administrator.

2 Access Administrator > Utilities > Data Load Programs > Employee Employment.3 Select Employee Import.4 (Optional) To validate the records you are going to load, select Actions > Validate All Records.

Records in error appear with the "Has Error" message. You should correct all errors beforecontinuing.

The Validate All Records action issues an error for the following records:

• When a record is missing a batch number and/or effective date.

• When an employee number is referenced in more than one batch.

Note:

It is preferable to load all records for the same employee with one batch.



5 To load all records in a batch, select Actions > Create All Employees, enter the batch numberand click OK.

or

To load a single record, highlight an employee and select Actions > Create Single Employee.

Note: If an employee has multiple records, you must load the records in effective date order (startingwith the oldest date), or you will get errors.

All records that are loaded successfully disappear from the list; only error records remain.

Note: • If multiple errors exist in one record, only the first error message appears on the list. If another

error still exists after you correct the first error, it will be caught the next time you run the Createaction.

• If you are loading multiple records for one employee and there is an error in one of the records,the record in error will display as such. The other records will display as unprocessed. Afteryou correct the error you will be able to reprocess all the records.

6 To correct a record that has an error, open the record, modify or add information as needed andsave.

7 Select the Create All Employees or Create Single Employee action again to load the remainingrecords.

Single-tenant Lawson System Foundation additions:Add required identities for new employee/user recordsCustomers who use a single-tenant Global HR and plan to use Global HR Hire Action to addemployees/users, must manually add required Lawson System Foundation attributes and serviceidentities for the user. The table that follows describes the attributes and identities.

Required forService / attributename

All Lawson System Foundation users must have this attribute, which isLSAPPS.

Productline

All HRM users must have an identity on the Employee service.Employee

All Lawson System Foundation users who run desktop tools must have anidentity on the thickclientldapls service. This includes users who access InforRich Client on the single-tenant system and those who make calls to theLawson System Foundation services Data (DME) or Transaction (AGS). Beforethe identities can be updated, these users must have an INFORBC accountwhich can only be created through CSP.

thickclientldapls

Users who use LID or who run batch jobs must have an identity on the lsenvservice. Before the identities can be updated, these users must have an IN-FORBC account which can only be created through CSP.

lsenv



Required forService / attributename

If you use Lawson System Foundation groups at your site, the user recordmust be updated with the attributes for all groups the user must belong to.

Group

There are several ways to update Lawson System Foundation user information. The sections thatfollow describe the available methods and where to locate information about how to perform the updates.

Option 1: Submit a CSP ticket to load identitiesFrom the CloudSuite Customer Portal (CSP), you can create and submit an Add User request ticketfor users who require their Lawson System Foundation user attributes to be updated. This methodenables you to mass-load identities for all users who need them. CSP is also the only method that youcan use to create an INFORBC account which is required for users who must have an lsenv orthickclientldapls identity.

Populate the spreadsheet that accompanies the Add User request with the Productline attribute andthe Employee service identity that all users must have. Add other attributes or identities as requiredby your system. These might include:

• thickclientldapls service (desktop tools access) and lsenv service (command line access and batchjobs).

• Groups: If you use Lawson System Foundation groups at your site, include the names of the groupsthat the user must access in the spreadsheet.

The entries in the spreadsheet must meet the following criteria:

• Username must match Actor.

• Email address must match what is stored for the user in Infor Ming.le CE.

• The thickclientldapls identity must be in the UPN format ([email protected]). An INFORBCaccount must exist before the identity can be be added. When you use CSP to update an identity,populate the AdLevel field to "Yes" for all users who need this identity. CSP will first add theINFORBC account and then add the identities.

• The lsenv identity is added automatically for all records that have AdLevel and LSFLevel set to"Yes" on the CSP input file. (The CSP Add User spreadsheet does not have a column for addingthe lsenv identity.)

Instructions for completing an Add User request, which includes adding identities to existing users,and populating the spreadsheet are available in the CSP. Click the Help button next to the Add Userrequest button to access the instructions.



Option 2: Update the user records through the Infor Securitydesktop toolAfter the user has been added to the Lawson System Foundation system through a user BOD, youcan use the Infor Security tool, Security Administrator (LSA), to update the user's record manually.This method is a good way to add a small number of records that do not require either an lsenv orthickclientdapls identity. (Because INFORBC accounts must already exist before lsenv or thickclientdaplsidentities can be updated, Infor recommends using CSP to add these identities.)

Information about how to update a user's record is in Resources and Security Setup Guide for CloudSuitewhich is available on docs.infor.com. Search for the topic "Adding an SSO Identity to an Existing User."

Option 3: Engage professional servicesThe command line tool, loadusers, is another way that user records can be updated. This method mustbe performed by an ICS consultant or certified partner. It is typically used to load all identities initially.Cloud customer-administrators do not use this method.

Typically, your consultant would use this method if you have so many users to update that creating theXML input file is faster than updating records manually.

ICS consultants and certified partners can find information about loadusers in Resources and SecurityAdministration Guide, the on-premises version of the guide, which is available on Infor Xtreme.



Chapter 13: Adding new users individually throughInfor CloudSuite Financials & Supply Management

Infor recommends that all users are added to the CloudSuite through Infor Global HR. For customerswho use only Infor CloudSuite Financials & Supply Management, there might be reasons why youprefer to add users directly through that application. This chapter provides the details.

Note: This chapter provides methods for linking actor context records to users. Another method thatinvolves using actor context templates might be appropriate for your needs. Information about actorcontext templates is not in this document. See CloudSuite Financials and Supply Management Userand Security Administration Guide.

Creating a new FSM user using the Infor Rich ClientwizardThis topic describes how to add a single user to Infor CloudSuite Financials and Supply Managementusing Infor Rich Client. This is not the typical way of adding users for FSM running under Infor OS CE,but you can use this method if you prefer.

1 Launch the CloudSuite multi-tenant Infor Rich Client by specifying a serverURL:https://gen-<tenant>-<type>. inforcloudsuite.com/canvas/

where



2 Access the User Management application and select User Management (a second time) and thenselect Actions > Infor Ming.le Create. This method of adding users ensures that they are addedautomatically to other systems, including Infor OS CE and Infor Lawson System Foundation (LSF)if this system is used.

3 On the General User Information page, specify the actor and the actor's prefix, first name, and lastname. Click Next.


Adding new users individually through Infor CloudSuite Financials & Supply Management

4 On the General User Information page, specify the actor and the actor's prefix, Given Name (firstname), and Family Name (last name). Click Next.

5 On the Actor Contact Info page, specify address and other contact information. Email is a requiredfield for all users.

Follow your company standards for any additional information that should be added and the format.

6 Click Save.

7 Verify that an identity and all default roles have been sent to Infor OS CE by the user BOD. Validateidentities on the Identies or Actor tabs. Validate roles on the Roles or Actor tabs.

The identity and default roles should be sent quickly. If necessary, perform a refresh.

8 On the Roles tab, assign any non-default roles that this user should have.

9 Click Finish. You are ready to add an Employee record for this user. Creating GHR Employeesfor CloudSuite Financials & Supply Management on page 112

Creating a new FSM user using Infor OS CEThis topic describes how to add a single user to Infor CloudSuite Financials and Supply Managementusing Infor OS CE. This is not the typical way of adding FSM but you can use this method if you prefer.

Note: You can also add individual users through the Infor OS CE mass-loading procedures.

1 Log into Infor OS CE as an administrative user and from the User Menu select User Management.2 Expand Manage and select Users.

3 Click the Add icon (plus sign).

4 On the page that appears, specify the user's First Name, Last Name and Email Address. Do notselect the Active checkbox.

5 Click Save.

6 Search for the user you added and with the user selected, click the Details icon to the left of theuser's name.

7 Add the Landmark Actor ID and click Save Item.

8 Move to the Security Roles field and assign all roles that this user requires that are not assignedby default.

9 Click Save. The user has been added in Draft mode.

10 When you are ready to activate the user, click the Back arrow to return to the previous menu. Selectthe box next to the user's name and click Activate Draft User. You are ready to add the Employeerecord for this user. Creating GHR Employees for CloudSuite Financials & Supply Managementon page 112



Creating GHR Employees for CloudSuite Financials& Supply ManagementCloudSuite Financials & Supply Management actors must have an Employee record in Infor GlobalHR. This is true even for customers who do not use the Infor Global HR product.

This topic describes how to add an Employee record for a CloudSuite Financials & Supply ManagementActor. You might use this method to add an Employee record to CloudSuite Financials & SupplyManagement, for example, if you do not yet have Global HR user provisioning configured or if you donot want to use the Hire Action.

Manually creating an employee without using the Hire Action1 Verify that the Actor Context for your HROrganization is set to the value you want the Employee

to be created in. Actor Context is set on both HCM and FSM product lines and must be checkedin both places.

2 Access Infor Global HR Employee Self Service from Infor OS as a user with the Admin_ST role.

3 Select the Administrator role drop-down menu.

4 Access the Resources menu and on the resource page, click Create.

5 On the At a Glance tab, specify this information:

Note: These instructions refer to specific required fields that must be populated for the Employeerecord. The fields listed here are typically required but, depending on configuration, your site mightrequire additional fields. You will not be able to save a record if all required fields are not populated.

• Employee ID: An ID that does not yet exist• Relationship To Organization: EMPLOYEE• Relationship Status: ACTIVE• Given (First): Employee's first name• Family (Last): Employee's last name

6 Move to the Dates & Service tab and for Start Date, specify a valid start date.

7 Click Save.

8 When prompted for an Effective Date, specify a date and click OK.

9 Move to the Personal Information tab.

10 In the first section for Contact Information, click Add Email.11 Specify these fields in the window:

• Effective Date: Valid Date• Email Address: Employee's valid email address• Preferred Email: Select to indicate that this is the preferred email address.• Change this to be a work email: Optional. Select to indicate that this is a work email address.

12 Click OK.



Manually adding actor context records and linking agentsThis procedure completes the process of manually adding an Employee record for Infor CloudSuiteFinancials & Supply Management by adding an Actor Context and a link to the Agent for the Employeeyou created in the previous procedure.

1 Log into Infor Ming.le as a Infor CloudSuite Financials & Supply Management administrator.

2 From Infor Ming.le select the Infor CloudSuite Financials application.

3 Assign the Agent to the Actor.

a Access the Application Administrator role in Infor CloudSuite Financials.b From the Financials or Supply Management menus, select Shared Processes >

EmployeeInformation.c Find and select the new Employee and from the Action menu, select Update Login.d Specify the name of the Actor.

Note: If you used Global HR user provisioning to add the user, the name must match the Actoryou provided at that time.

4 If Actor Context has not yet been assigned for the Employee, assign it now.

a From Administrative Console, select Security > Actor Context.b Select the Actor from the list or click Create and specify the Actor Name.c Select the Context Property. You must select it. Do not attempt to type the property manually.d Specify a valid name and click Save > New

5 Repeat steps 4c-d for the Context Properties for EnterpriseGroup, FinanceEnterpriseGroup, andHROrganization.

Note: When you finish adding the last Context Property, use Save, not Save > New.



Chapter 14: d/EPM Platform FSM users and roles

Updating the d/EPM Platform FSM content packageThis procedure describes how to install a d/EPM Platform FSM content update package to your InforCloudSuite Financials system.

Typically, a content update package contains multiple updates. Perform them in incremental order,starting with Update 1, continuing with Update 2, Update 3 and so on. Each incremental update takesapproximately one hour to complete.

Users cannot access d/EPM Platform FSM during the update. CloudSuite Financials forms withembedded analytics, such as Cash Management, will also be affected.

1 From Infor Ming.le, access d/EPM Platform Application Manager as a d/EPM Platform administrator.

2 Select the Infor CloudSuite Financials application and take it offline. If you receive a message thatusers are connected, disconnect them.

3 When the system is offline, verify that Infor CloudSuite Financials is selected and access theUpdates tab.

4 Check the Update button for the first package in the list. If you are prompted that conflicts exist,for example, with variables, select Overwrite for each one. After the first update completes, keepInfor CloudSuite Financials offline until you complete all updates.

5 From the Updates tab, repeat the Update step for the remaining incremental updates.

6 When you are finished making updates, return Infor CloudSuite Financials to online status.

Users and roles in d/EPM Platform: OverviewInfor CloudSuite Financials & Supply Management Analytics for Infor d/EPM Platform users are userswho have been added to IEFIN through Infor Ming.le User Management and who have been assignedat least one Infor d/EPM Platform-related security role through Infor Federation Services CE (IFS).

If a user who requires access to Infor CloudSuite Financials & Supply Management Analytics for Inford/EPM Platform does not appear in the Users and User Groups dashboard, which is grouped underthe User and Permission Management dashboard in Infor d/EPM Platform Application Manager, itmeans that either the user has not been added through Infor Ming.le or has not been assigned a securityrole in IFS.


d/EPM Platform FSM users and roles

Infor d/EPM Platform delivers pre-defined roles. You might choose to assign these roles to your usersas-delivered, make changes to them or create new roles.

In Infor d/EPM Platform users can be assigned roles that are intended to be used within Infor d/EPMPlatform only. A Infor d/EPM Platform user who has access to the User Management dashboard cancreate and assign these roles.

Note: Additional information related to enabling reports features is in the document Infor CloudSuiteFinancials & Supply Management User and Security Administration Guide which is available ondocs.infor.com.

d/EPM Platform user provisioning prerequisitesThis chapter describes how to register Infor CloudSuite Financials & Supply Management Analyticsfor Infor d/EPM Platform users and groups with IFS and how to administer Infor d/EPM Platform roles.Before you perform the tasks in this chapter, some prerequisite tasks must be performed.

• Assigning users to the appropriate Infor Infor d/EPM Platform groups using Infor Ming.le UserManagement. These groups were created as part of Infor d/EPM Platform tenant provisioning.

• Assigning groups to Infor CloudSuite Financials & Supply Management Analytics for Infor d/EPMPlatform and the Infor d/EPM Platform application home page using Infor Ming.le administrationsettings.

• Optional. Creating a BIAdministrator role using Infor Ming.le User Management. If you createthis role, it should have administrator access rights to Infor Ming.le and Infor Infor d/EPM Platform.The role should also be assigned to the Infor CloudSuite Financials & Supply Management Analyticsfor Infor d/EPM Platform application.

Information about how to perform these tasks is in the Infor Ming.le administration documentation.

Creating a d/EPM Platform administrator role (optional)You can create a d/EPM Platform administrator role to which you assign access to all Infor CloudSuiteFinancials & Supply Management Analytics for Infor d/EPM Platform content.

1 Sign in to IFS as an administrator.

2 From IFS User Management, select Configure > Master Data > Security Roles which is underthe User and Permission Management dashboard.

3 Click the Add icon in the Application Roles column and, at the dialog box, specify a unique namefor the role and add a description, for example, BIAdministrator.

4 With the new role selected, click the Edit icon in the Application Permissions column and select allcontent.

5 Select the Save icon when you are finished selecting content for the role.



Registering IFS users and user groups with d/EPMPlatformAfter Infor CloudSuite Financials & Supply Management Analytics for Infor d/EPM Platform users andgroups have been added in Infor Ming.le, they must be registered inside the Infor d/EPM Platformrepository. This is a one-time setup task.


2 Navigate to the Infor d/EPM Platform Application Manager homepage.

3 From the dashboard menu, select the Financials and Supply Management repository from theright-most column. This lists the roles in the repository.

4 From the dashboard menu, select Users and User Groups which is under User and PermissionManagement.

5 From the drop-down menu, select Register Infor Federation Services Manager CE Users andUser Groups.

6 Search for and select:

• Infor CloudSuite Financials & Supply Management Analytics for Infor d/EPM Platform rolesthat were created in IFS/User Management

• _ST roles corresponding to the list in the right-most column for the Financials and SupplyManagement repository

• BIDesigner role• BIAdministrator role, if you created this optional role for your site

7 Verify that the Users and User Groups to be Registered portion of the dialog box contains the rolesyou want to move and click OK.

8 Select BIDesigner from the left-most column.

9 Move to Application Roles (right-most column) and select the Edit icon, select the check box forthe BIDesigner role and click Save.

10 Repeat the process for the _ST roles, assigning each _ST role from the left-most column to itsmatching role in the right-most column.

11 Select the check box for the application role to assign it to the Infor Ming.le/IFS group.

12 Click Save in the Application Roles section.

Viewing user and user groups assignments for d/EPMPlatformAn administrator who has access to Infor d/EPM Platform can view details about Infor CloudSuiteFinancials & Supply Management Analytics for Infor d/EPM Platform users and user groups.


2 From the Infor d/EPM Platform Application Manager, select Dashboards > Users and User Groupswhich is under the User and Permission Management dashboard.



3 From the User and User Groups page in the Application Roles column, select the application forwhich you want to view Users and User Groups. By default, Infor d/EPM Platform ApplicationManager is selected. You can change to another application, for example, "Financials & SupplyManagement."

4 Select an item in any column to see the users, groups or application roles that have been assigned.For example, the left-most column, Users and User Groups, lists users and user groups that havebeen created in IFS and assigned at least one Infor d/EPM Platform-related role. When you selectan item in this list, the Basic Groups and Application Roles that have been assigned to the user orgroup are hilighted.

Creating custom d/EPM Platform application rolesUse these instructions to add roles that will be used within Infor CloudSuite Financials & SupplyManagement Analytics for Infor d/EPM Platform.

1 Sign in as an Infor Ming.le administrator or as a Infor d/EPM Platform user with the administratorrole if you have created one.

2 From Infor d/EPM Platform Application Manager, select Dashboards > Application Roles.

3 In the Application Roles column, select the application for which are creating custom roles, forexample, "Financials & Supply Management."

4 Click Add on the Application Roles column and, at the dialog box, specify a unique name for therole and add a description, for example, dEPM_FSM_Report_Writer.

5 With the new role selected, click Edit in the Application Permissions column and select the contentthat should be assigned to this role.

6 Select Save when you are finished selecting content for the role.

Assigning d/EPM Platform application roles to usersThis procedure describes how to assign custom Infor CloudSuite Financials & Supply ManagementAnalytics for Infor d/EPM Platform application roles to users.

1 Log in as an Infor Ming.le administrator or as a Infor d/EPM Platform user who has been assignedthe administrator role if you have created one.

2 From Infor d/EPM Platform administrator, select Dashboards > Users and User Groups, whichis under the User and Permission Management dashboard.

3 In the Application Roles column, select the application for which you created the custom role, forexample, "Financials & Supply Management."

4 Select the custom application role and click Edit in the Users and User Groups column. Select allusers and user groups that should have access to this role.



Enabling drillback in d/EPM Platform FSM1 Log in to Infor Ming.le as an administrator.

2 Navigate to the d/EPM Platform Application Manager homepage.

3 Select FSM Reports > Search. Type Financial Admin Configure and click Search.The Financials Configuration Page opens.

4 Check the boxes for FSM, GLTOT, and FINGP.


Enter the Data AreaThe name of your data area

Enter the CloudSuite Financials Logical IDYour logical ID



Chapter 15: d/EPM Platform MSCM users and roles

d/EPM Platform MSCM users are users who have been added to Infor Moble Supply Chain Managementthrough Infor Ming.le User Management and who have been assigned at least one d/EPMPlatform-related security role through Infor Federation Services CE (IFS).

If a user who requires access to d/EPM Platform MSCM does not appear in the Users and User Groupsdashboard, which is grouped under the User and Permission Management dashboard in d/EPM PlatformApplication Manager, it means that either the user has not been added through Infor Ming.le or hasnot been assigned a security role in IFS.

d/EPM Platform MSCM delivers pre-defined roles. You might choose to assign these roles to yourusers as-delivered, make changes to them, or create new roles.

In d/EPM Platform MSCM, users can be assigned roles that are intended to be used within d/EPMPlatform MSCM only. A d/EPM Platform MSCM user who has access to the User Managementdashboard can create and assign these roles.

d/EPM Platform MSCM user provisioning prerequisitesThis chapter describes how to register Infor d/EPM Platform MSCM users and groups with IFS andhow to administer Infor d/EPM Platform MSCM roles. Before you perform the tasks in this chapter,some prerequisite tasks must be performed.

• Assigning users to the appropriate Infor d/EPM Platform groups using Infor Ming.le UserManagement. These groups were created as part of Infor d/EPM Platform MSCM tenant provisioning.

• Assigning groups to Infor d/EPM Platform MSCM and the Infor d/EPM Platform application homepage using Infor Ming.le administration settings.

• Sending a request to the MT Cloud Ops team to populate the System Management page underAdministration.

• Optional. Creating a BIAdministrator role using Infor Ming.le User Management. If you createthis role, it should have administrator access rights to Infor Ming.le and Infor Infor d/EPM Platform.The role should also be assigned to the Infor d/EPM Platform MSCM application.

Information about how to perform these tasks is in the Infor Ming.le administration documentation.


d/EPM Platform MSCM users and roles

Creating a d/EPM Platform administrator roleYou can create a d/EPM Platform MSCM administrator role to which you assign access to all d/EPMPlatform MSCM content.

1 Sign in to IFS as an administrator.

2 From IFS User Management, select Configure > Master Data > Security Roles which is underthe User and Permission Management dashboard.

3 Click the Add icon in the Application Roles column and, at the dialog box, specify a unique namefor the role and add a description, for example, BIAdministrator.

4 With the new role selected, click the Edit icon in the Application Permissions column and select allcontent.

5 Select the Save icon when you are finished selecting content for the role.

Viewing user and user groups assignments for d/EPMPlatform MSCMAn administrator who has access to Infor d/EPM Platform MSCM can view details about Infor d/EPMPlatform MSCM users and user groups.


2 From the Infor d/EPM Platform Application Manager, select Dashboards > Users and User Groupswhich is under the User and Permission Management dashboard.

3 From the User and User Groups page in the Application Roles column, select the application forwhich you want to view Users and User Groups.

4 Select an item in any column to see the users, groups or application roles that have been assigned.For example, the left-most column, Users and User Groups, lists users and user groups that havebeen created in IFS and assigned at least one Infor d/EPM Platform-related role. When you selectan item in this list, the Basic Groups and Application Roles that have been assigned to the user orgroup are highlighted.

Creating custom d/EPM Platform MSCM applicationrolesUse these instructions to add roles that will be used within Infor d/EPM Platform MSCM.

1 Sign in as an Infor Ming.le administrator or as a Infor d/EPM Platform MSCM user with the Inford/EPM Platform MSCM administrator role if you have created one.

2 From Infor d/EPM Platform Application Manager, select Dashboards > Application Roles.



3 In the Application Roles column, select the application for which are creating custom roles, forexample, "MSCM."

4 Click the Add icon on the Application Roles column and, at the dialog box, specify a unique namefor the role and add a description, for example, MSCMUser.

5 With the new role selected, click Edit in the Application Permissions column and select the contentthat should be assigned to this role.

6 Select Save when you are finished selecting content for the role.

Assigning d/EPM Platform MSCM application roles tousersThis procedure describes how to assign custom Infor d/EPM Platform MSCM application roles to users.

1 Log in as an Infor Ming.le administrator or as a Infor d/EPM Platform MSCM user who has beenassigned the Infor d/EPM Platform MSCM administrator role if you have created one.

2 From Infor d/EPM Platform administrator, select Dashboards > Users and User Groups, whichis under the User and Permission Management dashboard.

3 In the Application Roles column, select the application for which you created the custom role, forexample, "MSCM."

4 Select the custom application role and click Edit in the Users and User Groups column. Select allusers and user groups that should have access to this role.



Part VI: Other integrations


Other integrations

Chapter 16: Perform additional product configuration

Depending on the products licensed at your site, you might have additional tasks to perform.

Global Financial Controller (GFC) integrationPerform the steps in this section for Financials & Supply Management tenants that use Global FinancialController.

Verify that the tenant is ready for GFC post-provisioningBefore you can perform the steps in this section, GFC should have been registered with ION. Usethese steps to verify that this has been done.

1 In ION Desk, navigate to the left pane menu and select Connect > Connection Points.

2 Verify that the GFC connection point exists. If it does, continue with the next tasks in this section.

Working with the GFC-to-Infor Ming.le connection points anddocument flowsIf the required connection points and document flows have been delivered by Infor, you can simplyimport them. If they have not been, you must configure the connection points and create the flowsmanually and then import them. This section describes both methods.

Import the delivered template (if available)If a document flow for GFC to Infor Ming.le was delivered, you can import it.

1 Verify that the GFC-to-Infor Ming.le document flow exists. In ION Desk, navigate to Connect >Document Flows. View the flows that are shown in the flow diagram. You can hover over themto view their names. You should see a flow with a name similar to: Mingle_to_GFC.xml


Perform additional product configuration

If the document flow does not exist, you must create it. Continue with instructions in another section.Configure the connection points and the document flow manually (if necessary) on page 124

2 With the delivered flow selected, click Merge additional documents.

3 Activate the document flow.

Configure the connection points and the document flow manually(if necessary)If the Infor Ming.le-to-GFC connection points and document flow have not been configured, performthe tasks in these sections.

Configure connection points for GFC-to-Infor Ming.le1 In ION Desk, navigate to Connect > Connection Points and select the Infor Ming.le connection

point.

2 Click the Add icon (+).

3 Search for and select the Sync.SecurityUserMaster document and click OK.

4 Click the check box under Send from Application and click the Save icon.

5 Return to the Connection Points page and select the GFC connection point.

6 On the Documents tab, click the Add icon (+).

7 Search for and select the Sync.SecurityUserMaster document and click OK.

8 Click the check box under Receive in Application and click the Save icon.

Create the document flow1 In ION Desk, navigate to Connect > Document Flows.

2 On the Documents tab, click the +Add icon and select Document Flow.

3 On the left side of the page that opens, specify Mingle-GFC for the Name of the document flow.

4 Create and configure the new document for Infor Ming.le.

a In the main portion of the page, select the Application icon and drag it to the space betweenthe Start and End icons.

b With the Application selected, specify Mingle for the Application Activity Properties field.c Click Add (+) below the Application Activity Properties field and, from the list that appears,

select the Infor Ming.le application. This will be named "Mingle" or a similar name. You canfilter the list if necessary. Click OK when you have selected the application.

d Attach the required documents. Click the paper icon that appears after the application nameand click Add and select the Sync.SecurityUserMaster and click Save.

5 Create and configure the new document for GFC.

a In the main portion of the page, select the Application icon and drag it to the space after theMingle application.



b With the new Application selected, specify GFC for the Application Activity Properties field.c Click Add (+) below the Application Activity Properties field and, from the list that appears,

select the GFC application. This will be named "GFC" or a similar name. You can filter the listif necessary. Click OK when you have selected the application.

d Attach the required documents. Click the paper icon that appears after the application nameand click Add and select the Sync.SecurityUserMaster and click Save.

6 Click Save from the toolbar when you are finished creating the applications.

7 Activate the flow.

Activate the poller1 In Infor Ming.le access the GFC application.

2 Click the field next to the name of the user and select the integration.

3 Click Administration > Settings.

4 In the General section, click the inbox poller switch so that it displays a checkmark.

5 Click Save.

Infor Document Capture (IDC) integrationThis section describes integration of CloudSuite Financials & Supply Management with IDM Capturefor processing supplier invoices. This integration enables the creation of supplier invoice records inFSM after data has been captured and processed by Infor Capture.

This section explains the integration requirements, configuration tasks, and troubleshooting information.It also describes how to publish Business Object Documents (BODs), load your data, and verify thatthe integration is set up correctly.

To prepare Infor Document Capture for use, perform steps to integrate with the Technology Tech Stackand with CloudSuite Financials & Supply Management.

Infor Document Capture OverviewInfor Document Capture (IDC) is an interface for Infor CloudSuite Financials & Supply Managementthat allows users to scan Invoices and create invoice records within FSM.

The following security classes are required for IDC depending on what users need to do with theproduct:

• APSpecialistProcessing_STs: Grants full access to CaptureDocument business class• IEFINCommonViewInformation_ST: Grants view access to CaptureDocument business class



The business process originates from a scanned paper invoice, an email with an invoice attached, oran invoice document that is dropped in to a monitored network folder.

Upon receipt of a document, Infor Document Capture begins processing the document and determineswhich type of document was received. If it is determined to be an Invoice type that is supported byFSM, a specifically defined batch class is used to extract information from the invoice. Using theextracted data, a SyncCaptureDocument BOD is built by Infor Document Capture and transmitted toInfor Document Management. The BOD is then forwarded to FSM through ION.

Simultaneously, an image of the scanned Invoice is sent to Infor Document Management and is storedwith a UniqueID in the FSM_ScannedDocument document type table.

The SyncCaptureDocument BOD is received by ION and transmitted to FSM where FSM then shredsthe BOD to determine the document type (PayablesInvoice) and begins reading the data in the BOD.

As the data is read, it is stored in the DocumentInterfaceInvoice business class from where it can beimported into the PayablesInvoice business class after running Interface Invoices. Sign in as PayablesManager and select Run Processes > Document Management Interface > > Interface Invoices. Thisprocess can be can be run manually or scheduled to run on a regular basis.

As data is stored in DocumentInterfaceInvoice it is augmented with data coming from cross referencetables built into FSM. These tables are used to populate invoice fields that may not be contained withina scanned invoice. Some examples include Payables Company, Vendor, and other FSM-specificvalues.

After the data is stored within the DocumentInterfaceInvoice business class it becomes viewable onthe Interface Invoice Maintenance screen within FSM. Sign in as Payables Manager and select RunProcesses > Document Management Interface > Interface Invoice Maintenance. When viewing thoserecords, the Related Information contextual application displays the corresponding document imagethat was scanned.

After the data is stored in DocumentInvoiceInterface, these processes occur:

• The data from DocumentInterfaceInvoice is read and used to create Invoice records.• At that time, an API within Infor Document Management (IDM) is used to copy the scanned invoice

image and create an entry in the FSM_PayablesInvoice table in IDM.• The image is stored using the keys from the invoice record within FSM.• The ReferenceID field on FSM_ScannedDocument is updated with the UniqueID from the record

in FSM_PayablesInvoice. The existence of this value tells the user that the ScannedDocumenthas been processed and allows the user to trace the record to FSM_PayablesInvoice. If desired,retention policies in IDM can also use this field as an indicator on when to archive or deleteprocessed records.

Invoices that were successfully created from the incoming data are viewable within the Payables Invoicescreen within FSM. Any invoices unable to move to the PayablesInvoice business class are displayedin the Interface Invoice Results list with error information. When viewing records on either screen, theRelated Information contextual application displays the corresponding document image that wasscanned.

After releasing the Invoice records, a SyncSupplierInvoice BOD is built by FSM and sent to ION to bedistributed to any connected systems.



Required knowledgeIn order to perform the integration tasks in this section, you must be familiar with:

• Infor ION and BODs. More information is available in these documents:• Infor OS Platform Administration Guide• Infor ION Desk User Guide

• Ephesoft• CloudSuite Financials & Supply Management, particularly the Invoice Interface programs. More

information is available in CloudSuite Financials Setup and Administration Guide.

Integrating IDC with the FSM application

Integration requirements and prerequisites

Required products

Before you perform the integration tasks in this section, the following products must be installed,configured and tested:

• Infor OS Platform 12.0.37 or later, including ION and Infor Document Management.

• Infor Capture – Ephesoft Transact 2019, or later• CloudSuite Financials and Supply Management 11.0.60, or later

In order to configure ION and CloudSuite Financials & Supply Management, Ephesoft must be connectedto Infor Document Management and a test scan must have been successfully processed by Ephesoft.The scan must appear in Infor Document Management. Instructions for this process can be found inthe Infor Document Capture Configuration Guide.

Configuration documents

The following configuration documents are available through KB article 2035783.

• Mapping Descriptions: CSFDocumentIntefaceInvoiceMapping.xlsx

• Sample SyncCaptureDocument BOD: SyncCaptureDocument1.xml• Sample Infor Capture mapping file: InforCaptureSampleBODMappings.properties



Configuring Infor Process Automation (IPA) for IDC integration

Enabling the process

Processes are called by the IPA Services and Channels.

1 From the Process Server Administration menu, select Configuration > Process Definitions >Application Defined Processes.

2 Select and open the process FSM_ION_SyncCaptureDocument_Inbound.

3 Select the Is Process Enabled checkbox.

4 Click Save to enable the process.

Connecting to ION

This integration has a solution XML file that is used to set up a sample model. When you import thesolution XML file in ION Desk, the CloudSuite FSM and Infor Document Management connection pointsand document flows for this integration are created in ION. In order for this integration to function, adocument flow that sends the SyncCCaptureDocument BOD from IDM to CloudSuite FSM must beset to active.

Inbound data to CSF must have the ION Channel in IPA activated.

1 From the Process Server Administration menu, select Administration > Channels Administrator> ION Channels.

2 Select the FSM ION Connector Channel.

3 Activate the ION Inbox Receiver for each of these BOD types:

• ION Receiver Type: BOD Type

• Receiver information: Sync.CaptureDocument

• Process: FSM_ION_SyncCaptureDocument_Inbound

Integration checklistReview the checklist to ensure that all integration tasks have been performed.

ReferenceTaskComplete?

During provisioning, the connection between Ephesoft and IDMwas established.

□

A test invoice has been scanned by Ephesoft and is success-fully stored within the IDM application.

□

ION Desk Admin-istration Guide

In ION Desk, configure ION so that SyncCaptureDocumentBODs are routed from IDM to CS FSM.

□



ReferenceTaskComplete?

Configure Ephesoft Transact batch classes to process incomingSupplier Invoices.

□

Properties file at-tached to KB2035783.

Enable the IPA Channel and process flow to process theSyncCaptureDocument BOD.

□

Payables UserGuide

Create rules to allow for the populating of any required datathat is missing from the BOD. For example, Vendor or Compa-ny.

□

Activate the document flow in ION Desk.□

Activate the batch class in Ephesoft.□

Push a sample supplier invoice to Ephesoft to validate.□

Infor Document Management (IDM) integrationIf your tenant uses Infor Document Management (IDM), it must be configured for use with FSM. Thisconfiguration enables the use of IDM templates to generate output documents.

The tasks in this section are one-time setup. Information for normal use and administration of IDM isin the Infor CloudSuite Financials & Supply Management documentation set available on docs.infor.com.

Verify that authentication to the IDM server has beenconfiguredUse this procedure to configure authentication of FSM to the IDM server.

1 Sign in to the FSM Administration Console.

2 Select Configuration Parameters.

3 Verify that the OAuth2 configuration parameters shown below exist. If they do not, create an InforXtreme ticket for them to be added.

Key nameComponent

AUTH_DS_URLconfig

AUTH_DS_PUBLIC_KEYconfig

AUTH_DS_SECRET_KEYconfig

4 At the time this document was published, the following parameters, which enable IDM redliningfunctionality, must be created manually.



ValueLgthTypeKey nameCompo-nent

<IDM_LID>

Provided by the IDM adminis-trator.

100AlphaIDM_LIDconfig

<Mingle_url>

Provided by the Infor Ming.leadministrator.

300AlphaMingle_urlconfig

Use toggles to update IDM attributesIDM configuration toggles are used to update IDM attributes of a manually attached document whena released action is performed. Toggles are available on the following document types:

• Journal Entry• Payables Invoice• Purchase Order• Requisition• Contract

1 Navigate to Application Administrator > Supply Management > Shared Processes > IDMConfiguration.

2 On the IDM Configuration List page, select a record to configure or click Create.

3 On the IDM Attribute tab, select the toggle that you want to enable.

4 Click Save.

When a released action is performed, the attributes of a manually attached IDM document will beautomatically updated.

Test the connection1 Navigate to Application Administrator > Supply Management > Shared Processes.

2 From the IDM Configuration List, select a record.

3 Move to the Test Connection tab and click Run Test Connection.Status messages appear on the screen. If the communication was successful, you will see "Passed.""Failed" indicates a problem and additional information about the reason for the failure. Thesereasons are likely to be related to incorrect configuration. If you receive a failed message, verifythat you have configured the IDM server correctly.

4 Review the messages that appear on the screen. The table that follows shows error messagesthat you might see and provides suggestions for how to resolve them.



Error messages and how to resolve themThe table shows error messages that can result from the Infor Document Management connection testand provides suggestions for where to begin troubleshooting.

Troubleshooting actionError

Check configuration parameter setup forauthentication keys.

Cause: Endpoint for IDM Connection must notbe null

Check configuration parameter setup forauthentication keys.

Cause: Application Key / Application Secret forIDM Connection must not be null

Add the IDM-User Security Role.Possible Cause: No IDM-User Role

IDM Response Message: 403 Forbidden

Import the latest idm-configuration.xmlIDM Configuration File is outdated

The IDM Output Management feature is disabledon this environment. Contact your systemadministrator.

Output Management Flag: Disabled

Check the endpoint port value.Possible Cause: Endpoint port is invalid.

Multi-tenant default port: 9443IDM Response Message: 403 Forbidden

Single-tenant default port: 9543

Verify the values for the IDM KEY and SECRETconfiguration parameters.

Configuration parameter for Application Key orSecret Key is incorrect or not valid.

IDM Response Message: 401 Unauthorized

Verify the value for the IDM ENDPOINTconfiguration parameter.

Possible Cause: Incorrect Endpoint

IDM Response Message: 404 Not Found

IDM printing servicesThis topic describes how to add IDM printers for use with Infor CloudSuite Financials & SupplyManagement (FSM).

Printers must already be added in IDM by an IDM administrator before you perform the steps in thissection. See Infor Document Management Administration Guide--Cloud Edition.

PrerequisitesBefore you configure an IDM printer for use with FSM, the following steps must be performed:

• The IDM Enterprise Print Service must be enabled.• The IDM printers that you want to use with FSM must be registered in IDM.



Note: If you are transitioning from Google Cloud Print to the IDM Enterprise Print Service, you mustmake a request to your IDM administrator to add the printer in IDM Enterprise Print using the sameprinter ID as the Google Cloud printer.

Syncing IDM printers from IDM to FSMThis procedure enables all IDM printers that have been enabled in IDM to be visible in FSM. Anyprinters added to FSM that have not been registered in IDM will be set to inactive.

1 Select Application Administrator > Supply Management > Shared Processes > IDMConfiguration.

2 From the IDM Configuration List, select a record.

3 On the Action menu, select Sync IDM Printers.

4 To view IDM printers, navigate to Application Administrator > Supply Management > SharedProcesses > Printer Setup > IDM Printers.

Note: If a printer you expected to see is not listed, the most likely reason is that it has not beenregistered with IDM. Contact your IDM administrator.

Adding an email-enabled printer for IDMThis procedure describes how to add an email-enabled printer for use with IDM. In this method ofprinting, documents are sent to the email address of the printer.

1 Select Application Administrator > Supply Management > Shared Processes > Printer Setup> IDM Printers.

2 Click Create.

3 On the page that appears, specify this information:

• Name: Provide a name for the printer• Type: Select Email Enabled• Email: Specify the email address of the printer. This is the address that will receive the printing

requests for PDF documents that are sent as attachments.• Description: Specify a description of the printer.• Active: Enable this flag when you are ready for this printer to be available for user selection.• Exists in IDM Application: This flag is not relevant for email-enabled printers. You can ignore

it.

4 Click Save.

Infor Coleman Digital Assistant integrationInfor Coleman Digital Assistant is provisioned with the product.



The tenant administrator must grant users the appropriate security roles to access Infor Coleman DigitalAssistant.

Assigning rolesIn User Management, you must assign roles to the appropriate users.

All Coleman Digital Assistant users and administrators also must have access to Infor Chat.

This table shows the roles that are included with Coleman Digital Assistant:

DescriptionRole

The role includes these abilities:

• Access Infor Coleman Digital Assistant in theportal.

• Access Coleman Digital Assistant from InforChat.

• View the Coleman Skills page and the skillsthat either have no skills security or wheresecurity is whitelisted by name or role

• View skill details and summaries, but noability to edit or perform other skill actions.

• If Alexa is set up for the tenant, receive aninvitation to be an Alexa user.

• View custom requirement types.

ColemanDA-User

This role includes all abilities assigned to Cole-manDA-User and these additional abilities:

• Access all areas of the Skill List view on theColeman Skills page, including the status ofeach skill.

• Add, import, export, edit, and build skills.• Access to the Try It Out pane.• View, create and edit custom requirement

types.• View skill security.

ColemanDA-Advanced

This role includes all abilities assigned to Cole-manDA-Advanced and these additional abilities:

• Deploy, disable, enable, and delete skills.• Delete custom requirement types.• Add and modify skill security.• Import skill security information that is at-

tached to a skill.• Set up Alexa, invite Alexa users, deploy

Alexa skills and invite Alexa beta testers.

ColemanDA-Administrator



DescriptionRole

This role manages users' messages to ColemanDigital Assistant on the Social Data screen.

You must assign this role when GDPR compli-ance is required.

ColemanDA-DataAdmin

Configuring Infor CloudSuite Financials and SupplyManagement skillsSkills are not provisioned automatically. You must import and modify them to meet the needs of yourusers. Information about how to import or create skills is in Infor CloudSuite Financials and SupplyManagement Administration Guide for Coleman Digital Assistant and in Infor Coleman Digital AssistantUser Guide.

Perform product integrations for products not includedin this sectionFor Global HR / Talent Management integration steps, review Infor Global HR and Talent ManagementIntegration Guide.

For Infor CloudSuite Financials & Supply Management, review the documents for any of these productsthat you use. These documents are located in Infor Xtreme. From the CloudSuite Financials & SupplyManagement documentation record, select Integrations and then the specific product.

• Infor Dynamic Enterprise Performance Management (d/EPM): Infor Dynamic Enterprise PerformanceManagement Integration Guide for Infor CloudSuite Financials & Supply Management Release11.0.x

• Infor Enterprise Asset Management (EAM): Infor Supply Infor CloudSuite Financials & SupplyManagement Integration Guide for Infor Enterprise Asset Management

• Infor Expense Management: Infor Supply Infor CloudSuite Financials & Supply ManagementIntegration Guide for Infor Expense Management

• HRM/Payroll: Infor Lawson HRM/Payroll Integration Guide for CloudSuite Financials Payables



Part VII: Additional information


Additional information

Chapter 17: Product URLs

Valid URLs for Global HR for multi-tenant clientsThese are the valid HTML5 URLs for the Global Human Resources and Talent Management products:

For Employee and Manager mobile apps:

• Employee: https://hcm-<customer>-<type>.inforcloudsuite.com/hcm/MobileEmployee/home

• Employee: https://hcm-<customer>-<type>.inforcloudsuite.com/hcm/MobileManager/home

Home page: https://hcm-<customer>-<type>.inforcloudsuite.com/hcm/web/home

Administrator Console: https://hcm-<customer>-<type>.inforcloudsuite.com/hcm/AdministratorConsole/home

Application Administrator: https://hcm-<customer>-<type>.inforcloudsuite.com/hcm/Administrator/home

Async web app: https://hcm-<customer>-<type>.inforcloudsuite.com/hcm/AsyncWebApp/home

LPA: https://hcm-<customer>-<type>.inforcloudsuite.com/hcm/Lpa/home

LPA Administrator: https://hcm-<customer>-<type>.inforcloudsuite.com/hcm/LpaAdmin/home

Process Designer: https://hcm-<customer>-<type>.inforcloudsuite.com/hcm/ProcessDesigner/home

Infor Rich Client: https://gen-<tenant>-<type>.inforcloudsuite.com/canvas/home

Infor Process Designer (IPD) download sign in dialog : https://hcm-<customer>-<type>.inforcloudsuite.com/bpm/download?file=IPD


Product URLs

Valid URLs for multi-tenant clientsThese are the valid HTML5 URLs for Infor CloudSuite Financials & Supply Management multi-tenantclients.

<customer> is the tenant name.

<suppliergroup> must be a valid supplier group already existing in data.

<customergroup> must be a valid customer group already existing in data.

<Type> refers to the 3 characters that represent the type of tenant. Options for <Type> are: DEV, PRD,TRN, TST, AX1, AX2, AX3, and DEM. The options available depend on the types of tenants that areprovisioned.

Home page: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/web/home

CloudSuite Financials & Supply Management supplier test: https://sms-<customer>-<type>.inforcloudsuite.com/fsm/SupplyManagementSupplier/home

CloudSuite Financials & Supply Management supplier valid supplier group: https://sms-<customer>-<type>.inforcloudsuite.com/fsm/SupplyManagementSupplier/home?csk.SupplierGroup=<suppliergroup>

Billing Receivables Portal home test: https://brp-<customer>-<type>.inforcloudsuite.com/fsm/BillingReceivablesPortal/home

Billing Receivables Portal valid customer group: https://brp-<customer>-<type>.inforcloudsuite.com/fsm/BillingReceivablesPortal/home?csk.CustomerGroup=<customergroup>

Administrator Console: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/AdministratorConsole/home

Application Administrator: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ApplicationAdministrator/home

Approver: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/Approver/home

Asset Analyst: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/AssetAnalyst/home

Asset Manager: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/AssetManager/home

Async web app: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/AsyncWebApp/home

Batch task admin: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/BatchTaskAdmin/home

Billing Administrator: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/BillingAdministrator/home

Billing Manager: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/BillingManager/home


Product URLs

Budget Analyst: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/BudgetAnalyst/home

Budget Controller: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/BudgetController/home

Buyer: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/Buyer/home

Cash Accountant: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/CashAccountant/home

Cash Administrator: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/CashAdministrator/home

Cash Analyst: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/CashAnalyst/home

Cash Manager: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/CashManager/home

Chief Financial Officer: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ChiefFinancialOfficer/home

Close Administrator: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/CloseAdministrator/home

Close Manager: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/CloseManager/home

Close Resource: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/CloseResource/home

Contract Manager: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ContractManager/home

Controller: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/Controller/home

Credit and Collection Specialist: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/CreditAndCollectionSpecialist/home

EDI Administrator: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/EDIAdministrator/home

Financial Business Analyst: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/FinancialBusinessAnalyst/home

Financials Viewer: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/FinancialsViewer/home

Franchise Billing Administrator: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/FranchiseBillingAdministrator/home

Intercompany Billing Specialist: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/IntercompanyBillingSpecialist/home


Product URLs

Inventory Manager: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/InventoryManager/home

Item Master Specialist: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ItemMasterSpecialist/home

Landing page web app: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/LandingPageWebapp/home

Lease Specialist: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/LeaseSpecialist/home

LPA: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/Lpa/home

LPA Administrator: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/LpaAdmin/home

Match Specialist: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/MatchSpecialist/home

Order Entry Manager: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/OrderEntryManager/home

Par Level Specialist: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ParLevelSpecialist/home

Payables Administrator: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/PayablesAdministrator/home

Payables Manager: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/PayablesManager/home

Payables Processor: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/PayablesProcessor/home

Payables Specialist: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/PayablesSpecialist/home

Pricing Manager: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/PricingManager/home

Process Designer: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ProcessDesigner/home

Project Accountant: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ProjectAccountant/home

Project Administrator: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ProjectAdministrator/home

Project Certifier: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ProjectCertifier/home

Project Manager: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ProjectManager/home


Product URLs

Project Resource: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ProjectResource/home

Purchasing Manager: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/PurchasingManager/home

Item Lifecycle Management Administrator: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/RecallAdministrator/home

Item Lifecycle Management Coordinator: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/RecallCoordinator/home

Item Lifecycle Management Responder: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/RecallResponder/home

Receivables Administrator: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ReceivablesAdministrator/home

Receivables Manager: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ReceivablesManager/home

Receivables Specialist: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ReceivablesSpecialist/home

Purchasing Receiver: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ReceivablesSpecialist/home

Reconciler: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/Reconciler/home

Reconciliation Administrator: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ReconciliationAdministrator/home

Reconciliation Auditor: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ReconciliationAuditor/home

Reconciliation Manager: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/ReconciliationManager/home

Requester: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/Requester/home

Sourcing Manager: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/SourcingManager/home

Staff Accountant: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/StaffAccountant/home

Supply Management Administrator: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/SupplyManagementAdministrator/home

Supply Management Viewer: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/SupplyManagementViewer/home

Warehouse Clerk: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/WarehouseClerk/home


Product URLs

Work Order Manager: https://fin-<customer>-<type>.inforcloudsuite.com/fsm/WorkOrderManager/home

CloudSuite Financials & Supply Management infocenter : https://fin-<customer>-<type>.inforcloudsuite.com/fsm/help/controller.servlet?context.dataarea=<iefinproductline>mtqat03_tst_<iefin productline>

Infor Rich Client: https://gen-<tenant>-<type>.inforcloudsuite.com/canvas/home

Infor Process Designer (IPD) download sign in dialog : https://fin-<customer>-<type>.inforcloudsuite.com/bpm/download?file=IPD


Product URLs