<script> AJS.toInit(function(){ if (AJS.params.remoteUser == ''){ AJS.$('#header').hide(); AJS.$('#main-header').hide(); } }); </script> <iframe id="topheader" src="https://www.targit.com/layouts/targit13/doc_confluence.aspx" scrolling="no" style="width:100%;height:467px;overflow:hidden;scrolling:no;"></iframe> |
TARGIT can now delegate user authentication to external identity providers such as Azure, ADFS, Google etc.
OpenID is increasingly becoming a standard for user authentication. Organizations that already embrace this technology will be delighted to learn that TARGIT now also supports this.
Disclaimer: Administrators working with setting TARGIT up for OpenID user authentication will need to know in advance how to work with the interface of the external identity provider of choice.
When you add a new external identity provider to your TARGIT solution, these are the general steps to take:
Before adding an external identity provider, make sure that Public URLs for the TARGIT Server and the Anywhere component are set up correctly. This is done in the TARGIT Management client, in Setup / Back-end:
Note: Replace “localhost” with the correct server name or IP address within your organization. Also note that the Anywhere component (on the IIS) and the TARGIT server are not necessarily installed on the same server.
The OpenID authentication method has become a new option in the TARGIT Management client’s Security settings:
The Identity Providers dialog lets you add one or more identity providers to the list.
When you add a new Identity Provider, you must fill in its’ settings in the IdentityProviderEditor dialog:
Example on a filled in Identity Provider for Azure OpenID:
The icon and the name is what the end-user will see when logging on to a TARGIT client.
An Identity Provider’s associated script is essential for, at least, the mapping between the external identity provider’s AD users and groups and the internal AD users and groups.
You will need to know the SIDs from both sides.
Example on a script related to an Azure OpenID identity provider:
Use the “Test Login” option to login as one of the authenticated users. The information you get in return can be used for filling parts of your script, e.g. a group SID.
Furthermore, once you have done a Test Login and potentially modified your script, you can then “Run” the script. This will do the mapping and, in Outputs, give you additional information about the user, based on the internal AD.
Now that this user has been mapped from an external identity provider group to an internal AD group (and assuming that internal AD groups already have been added to TARGIT roles), you can then Look up user permissions to get an overview of the user’s effective permissions with regard to access to documents folders, databases, forced criteria etc.
For an existing identity provider, you may:
The solution is based on OpenID Connect, where the user's identity is encoded in a secure JSON Web Token (JWT), called an ID token, based on the standard OAuth 2.0 flow.
The ID token resembles the concept of an identity card, in a standard JSON Web Token (JWT) format, signed by the Identity Provider. An ID token has a limited lifetime (e.g. 30 minutes), so a Refresh token is also provided that can be used to query for a new ID token. The Refresh Token will be necessary for e.g. running scheduled jobs, because we "simulate" a user login.
Authentication will take place at the Identity Provider in two steps.
First step is to request an Authorization Code from the Identity Provider, for that the TARGIT client will use a trusted agent (browser) separate from the TARGIT application. The browser (standard system browser) will handle the dialogue that send the End-User to the chosen Identity Provider.
At the Identity Provider, the End-User will typically be authenticated by checking if they have a valid session (established by a browser cookie), and in the absence of that, by prompting the user to login. After that the user will typically be asked whether they agree to sign into TARGIT.
The TARGIT client will pass the Authorization Code to the TARGIT Server which in step two will do a “back-end” authorization against the Identity Provider, and in exchange for the Authorization Code receive an ID token and the Refresh token. The ID token will be security validated by TARGIT
Functionality TARGIT Management:
In TARGIT Management there will be added an additional security model “OpenID”.
In the “OpenID” security model you will be able to specify/“add” which Identity Provider that you want to trust. For custom Identity Provider you will be able to define a URL with the address of the custom Identity Provider and request parameters in the URI query.
To integrate OpenID into our rights/role-based security model, it should be possible to define certain rules on each right/role that determine if the right/role will be active for a given user. These rules could be something like: if the value of claim x equals y, then this right/role should be active. The administrator can then create several rights/roles that defines what each user can do - based on the contents of their ID token.
Functionality TARGIT Client:
When an end-user log into TARGIT, the TARGIT Client should be responsible for launching the browser to initiate the OpenID connect login. When an Authorization Code is received, it should be handed to the TARGIT Server where the actual token handling takes place.
Functionality TARGIT Server:
The TARGIT Server will be the only one knowing the client secret, therefore the actual handling of the ID token and Refresh Token will take place here. Each right and role will be checked to see if any of the OpenID rules are met. After rights and roles have been determined, we will issue our own security token to the TARGIT Client to be used internally.
In this example, you already have an Azure portal account and your Azure AD is already set up with a number of users and groups.
Azure:
i. Apply a proper name (can be changed later) and Register
ii. Copy and store the Application (client) ID. You will need this later.
i. Microsoft Graph
ii. Delegated permission
iii. Checkmark Group.Read.All
iv. Click the Add permissions button at bottom.
i. "groupMembershipClaims": "All",
TARGIT:
i. Authorization Endpoint
ii. Token Endpoint
iii. Scope
Azure:
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/323433758" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
A Document may contain a number of different Layouts. You may start out by designing an analysis with a layout suitable for landscape mode on PC desktops.
Next, in the same document, using the same objects, you could add a new layout suitable for e.g. portrait mode on a Tablet.
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/322570592" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
TARGIT will use a set of rules to detect which Layout it should open by default on a specific device type:
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/322575744" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
Pixel-by-pixel control of object size and placement with the new free flow design capabilities.
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/323439264?app_id=122963" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
The canvas supports overlapping and transparency for all objects so you can design how you want.
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/323457535" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
Easily align and distribute multi-selected objects with the new Align and Distribute tools. Object placement in the new TARGIT Canvas couldn’t be easier.
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/323461212" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
Crosstabs columns can be stretched to fit the size of crosstab object box.
You have three options for Autofitting:
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/322207730" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
Host all your objects from a specific design in one list. Custom name each object for easy recognition and selection, such as according to type or content.
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/323477509" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
Although most objects would automatically scale correctly when switching between layouts with different page sizes, you may occasionally want to work with some manual object scaling. This would usually be something to be considered when working with crosstabs or other objects containing text or labels.
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/322572651" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
The essence of adding data to a Report Layout - crosstabs, graphs, KPI objects etc. - is identical to that of adding data to a Dashboard Layout.
You can even have a Document with both layout types - Dashboard Layouts and Report Layouts - sharing objects from the Objects list.
Report Layouts differ from Dashboard Layouts mainly on these topics:
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/323102108" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
A Report Layout may contain multiple pages with different layout and different content on each page. Pages can be of different sizes and formats.
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/323112257" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
A template may contain as many objects as you like - even data objects.
In this video tutorial you will see how to create a very basic template - just with a specific page size - and how to save and use it.
For templates to be available, they must be saved in a folder that has been designated as a Templates folder.
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/323174852?app_id=122963" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
A Placeholder object is an object you can add to a document with the purpose of later replacing it with another object – e.g. a chart or a crosstab.
In this way, a Placeholder object works very well with templates.
You can designate an area in your report that should later be replaced by a chart, a crosstab or any other type of object.
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/325001693" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
A User dimension is a dimension that is created by the end-user. The individual dimension members of a User dimension are defined from criteria from one or more standard dimensions.
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/322740537" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
Each member in a user dimension can now be configured to ignore specific filters (dimensions) when they are applied through global criteria or through drills. This allows for a much more robust and flexible design of user dimension members.
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/325186316" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
Consumers can drill and remove drills by clicking the same area on an object. Removing a drill has never been easier.
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/325157141" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
Now you can set up criteria as a dimension member range on hypothetical, non-existing dimension members. E.g. you could set up a criteria with an Account dimension member range from account number 8000 to account number 8999.
At the time of setting up the criteria, the account numbers '8000' and '8999' did not exist in your system, but you could anyway insert them as custom values. As you, in your accounting system, add more accounts in the range 8000 to 8999, they would automatically be picked up by this criteria range.
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/325167432" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
This guide will tell you how to download and install the TARGIT Decision Suite Trial version. The Trial version includes all demo data and demo analyses that have been used throughout this E-Learning portal - so, with a similar installation on your own PC, you will be able to recreate the examples and try out the exercises of this portal.
Please bear in mind that the videos and exercises are based on a specific version of TARGIT - usually the latest version. If you run an earlier or a later version, your results may differ. E.g. if an exercise refer to a specific year, you may try with the previous year or the next year to get the same result.
For the record, there is no difference between a Trial version and a Production version, except that the Trial version will expire after 30 days.
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/317993608" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
Simply run the installation file again if you want to modify your existing TARGIT installation.
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/318170703" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
If you need to, you can uninstall the TARGIT Decision Suite by running the TARGITSetup.exe file again, or by uninstalling "TARGIT Decision Suite" via the Control Panel.
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/324936827?app_id=122963" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
You can select a number of stored documents to be shown as a slideshow or to be exported as a PowerPoint document.
The Slideshow feature is an improved version of the previous Storyboard feature.
<div style="margin-left: 30.0px"> <iframe src="https://player.vimeo.com/video/325151225" noborder="0" width="800" height="450" allow="fullscreen" scrolling="yes" seamless></iframe> </div> |
<style type="text/css"> #title-text { display: none;} #breadcrumbs, #footer, #likes-and-labels-container, #comments-section { display:none; } div.theme-default .ia-splitter #main { margin-left: 0px; } .ia-fixed-sidebar, .ia-splitter-left { display: none; } div#main { margin-left: 0px !important; } div#footer { margin-left: 0px !important; } .columnLayout.two-equal { padding-left: 20px; padding-right: 20px } #main #content { padding-right:0px; } div#main { padding:0px; } #page { overflow-x: hidden; } iframe#topheader { border:0px; } .contentLayout2 .columnLayout { margin-bottom:0px; } #workflow-page-message { margin-bottom: 0px; } </style> <script src="//cep.targit.com/bundle/beacon"></script> <div class="Footer" style="background-color: #1d252d;width:100%;"> <div class="loop" style="padding-top:69px;padding-bottom:72px;text-align:center;"> <img src="https://targitmedia.azureedge.net/Resources/MainSite/Images/TARGIT_OODA-jigsaw-start-screen.svg" style="margin-bottom:32px;width:100px;"> <div style="font-size:24px;line-height:32px;letter-spacing:0.6px;color:#fff;"> Courage to Act </div> </div> <div style="width:100%;background-color:#121a23;"> <div style="width:1080px;margin:auto;padding-bottom:20px;padding-top:20px;"> <div style="float:left;font-size:13px;color:#8a9298;"> <div style="margin-top:5px;display:inline-block;padding-right:30px;color:#8a9298;"> © 2019 TARGIT. All Rights Reserved. </div> <a style="margin-top:5px;display:inline-block;text-decoration:none!important;color:inherit;font-size:13px;" href="https://www.targit.com/en/personal-data-policy">Personal Data Policy</a> </div> <div style="float:right;"> <a style="vertical-align:super;font-size:13px;letter-spacing:0.6px;margin-right:36px;color:#fff;text-decoration:none!important;text-transform:uppercase" href="https://www.targit.com/en/meet-targit/meet-the-targit-team/contact-targit">CONTACT</a> <a style="vertical-align:super;font-size:13px;letter-spacing:0.6px;margin-right:36px;color:#fff;text-decoration:none!important;text-transform:uppercase" href="https://www.targit.com/en/meet-targit/targit-news/news-list">PRESS</a> <a style="vertical-align:super;font-size:13px;letter-spacing:0.6px;margin-right:36px;color:#fff;text-decoration:none!important;text-transform:uppercase" href="https://www.targit.com/en/meet-targit/targit-career/jobs">CAREERS</a> <a style="margin-right: 36px !important;text-decoration: none !important;color: inherit;" href="https://twitter.com/targit" target="_blank"><img src="https://targitmedia.azureedge.net/Resources/MainSite/Images/twitterfooter.png"></a> <a style="margin-right: 36px !important;text-decoration: none !important;color: inherit;" href="https://www.linkedin.com/company/targit" target="_blank"><img src="https://targitmedia.azureedge.net/Resources/MainSite/Images/linkedinfooter.png"></a> <a style="margin-right: 36px !important;text-decoration: none !important;color: inherit;" href="https://www.facebook.com/TARGIT.BI.Suite" target="_blank"><img src="https://targitmedia.azureedge.net/Resources/MainSite/Images/fbookfooter.png"></a> </div> <div style="float:none;clear:both;"></div> </div> </div> </div> |