Mango Core

User settings

Setting Default Value Description
Display Name This is the name of the logged in user which is displayed at the top of the Canvas.
Default Profile Default value is specified by the installer when installing the Server for Infor Smart Office This is the system profile used by Infor Smart Office. It can be changed in the Settings dialog box. Valid values are any of the created system profiles.
Show Profile Selector on startup Disabled When this setting is enabled, a dialog is shown on startup allowing the user to select which profile to use. The Default Profile setting is ignored.

Application settings

Setting Default Value Description
Enable Roaming Profiles Enabled When this setting is enabled, roaming profiles are enabled. When roaming profiles are enabled, the user settings are stored on the server. Therefore, regardless of the client machine on which the user starts Infor Smart Office, the user will always get his or her own private settings. For more information, see Roaming profiles.
Enable roaming files whitelist Enabled

The recommended value is Enabled to tighten the security when uploading roaming files to the Smart Office server.

If you have installed non-Infor features verify them with this setting enabled in test. Or you can test it with a subset of users first before enabling this setting.

Allowed Applications

Select Enable All to make all applications available to users.

To enable applications individually, select Enable Selected and choose the applications you want from the list.

You can click Select/deselect all to toggle between all selected or all deselected.

Allowed Widgets

Select Enable All to make all widgets available to users.

To enable widgets individually, select Enable Selected and choose the widgets you want from the list.

You can click Select/deselect all to toggle between all selected or all deselected.

Trusted Web Service Servers

This setting is used by mashup REST and WS data services and only applies if you are using mashup applications with authentication.

If you add a server to this list, Lawson mashup application users will not receive a message asking them to trust the server when the mashup accesses that server.

To add a server, type the IP address or fully-qualifed domain name into the text field and click Add. To remove a server, select the server name and click Remove.

Webservice timeout 2 This is the timeout range in minutes for receiving data.
Webservice connection timeout 2 This is the timeout range in minutes for a connection to be established.
Screen lock timeout 60 The number of minutes a user has to be idle before Smart Office is locked. When Smart Office, is locked the lock screen is displayed and the user must enter the user password to unlock Smart Office. A value of zero means this functionality is disabled.
Idle event timeout 10 The number of minutes a user has to be idle before the idle event is raised by the client. Applications running in Smart Office may optionally respond to the idle event. MForms for example will log out the M3 session if no M3 programs are started. A value of zero means this functionality is disabled.
Idle client loggoff timeout 0 The number of minutes a user has to be idle before the user is automatically logged out. The user is logged out by restarting Smart Office. All running programs will be closed. When the logout is complete, the logon dialog should be displayed. A value of zero means this functionality is disabled.
Idle tasks shutdown timeout 0 The number of minutes a user has to be idle before all running programs in Smart Office are closed. This includes all programs that are visible in the Smart Office task bar. A value of zero means this functionality is disabled.
Canvas help url
Lock display name Enabled

When this setting is enabled, the Display Name field in the Settings dialog is read-only.

Caution: 
If you enter a name in the Display Name field and check the Lock display name, all users will be using that display name.
Enable unsafe header parsing Disabled This setting enables unsafe HTTP header parsing in .NET. This settings should only be enabled when necessary as a workaround for HTTP protocol violation exceptions. These exceptions are caused by incorrect HTTP response headers that are received from application servers.

LDAP settings

Setting Default Value Description
Disable LDAP server Disabled

When this setting is disabled, Infor Smart Office uses the LDAP settings to fetch the Display Name for a user.

Note: This functionality only works when using Active Directory as a LDAP server.
Server

This setting is used only when the Disable LDAP Server is disabled. This setting specifies the Active Directory server used to query the user's display name. If left blank, the same server that the user logged on to his or her Windows machine is used. A specific server can also be specified in the format ldap://server:port

Example

ldap://myserver:389

Base

This setting is used only when the Disable LDAP Server is disabled. The Base specifies where in the LDAP to search after the user starts Infor Smart Office.

Note: Do not use any space in the search string. For example, DC=corpnet,DC=lawson,DC=com

If this setting is blank, the environment variable USERDNSDOMAIN on the client machines are read and transformed into the DC=.. format.

Filter

(&(objectclass=user)

(sAMAccountName=%s))

This setting is used only when Disable LDAP Server is disabled. This setting specifies which filter is used when searching for the user. %s is where the user id is replaced. Since the settings file is a XML file, all "&" must be replaced with "&amp"
Return Attributes givenName, sn

This setting is used only when Disable LDAP Server is disabled. This setting specifies which attributes should be returned. One or more attributes can be specified, separated with a ",". If more than one attribute is specified, the attributes are concatenated with a space between them.

Example

givenName,sn

For a specific user, the result should be "Fred Smith" if the givenName attribute is Fred and the sn attribute is Smith.

Add domain after authentication Disabled

This setting is used in scenarios where some applications such as IDM requires a domain but the Smart Office server does not require one. When the setting is enabled, a user may log-on without a domain to Smart Office and still be authenticated with domain for the application.

Settings values:

No = Not enabled

Yes (user@domain) = Enabled with the user name format "User Principal Name".

Yes (domain\user) = Enabled with the user name format "Down-Level Logon Name".