Posted in Google Apps for Education, Green Schools, Paperless Schools

How to combine frevvo with Google Apps for Paperless Schools

Too much paper in schools

Many K-12 schools use Google Apps for Education – a suite that provides email, collaborative documents etc. School districts have hundreds of forms that can be digitized: Enrollments, Admissions, Emergency Contact Forms, Consent Forms and so on.

As a result, schools still use tons (literally 140 tons per year on average) of paper. That paper usage is not just inefficient, but goes against sustainability and environmental goals.

Continue reading “How to combine frevvo with Google Apps for Paperless Schools”
Posted in Workflows

How Dynamic Forms Streamline your Workflow Process

Paper-based processes throttle the growth of an organization. There are simply too many bottlenecks in designing, filling, and storing paper forms. On top of that, when you consider the costs of correcting errors and dealing with misfiled, damaged or lost forms, it’s easy to see how paper-based processes are expensive and inefficient.

frevvo’s cloud-based software offers fully automated dynamic forms and workflows designed to enhance productivity and drive down process costs. Now, it’s easy to get secure access to your documents and data from your mobile phones, and to share, save and process forms and approvals in a timely manner. frevvo unifies access control, user rights, and administrative settings through all devices ensuring complete security. Continue reading “How Dynamic Forms Streamline your Workflow Process”

Posted in HowTo

SAML 2.0

With the release of 6.2, customers will have the option to login to frevvo via SAML 2.0. This is primarily meant for cloud tenants who use LDAP but do not want to expose it over the internet. Of course, there will be those who prefer to use it simply because it offers single sign-on (SSO). The inability to access LDAP does require us to store user and role information in frevvo in order to route the workflow tasks. This data duplication may seem unwarranted in on-premise deployments, where LDAP is accessible. On the other hand, there is still Integrated Windows Authentication as an SSO option.
The use of SAML requires the configuration and installation of a SAML identity provider product. These products can be free (Shibboleth, OpenSSO) or commercial (ADFS, PingFederate, etc), require IT savvy personnel to set it up, or be subscription based cloud providers like OneLogin who provide connectors to hook up your LDAP with SAML. Once setup, you need to release attributes about the user viz. user id, first name, last name, email, manager user id, and role names. Manager and Role attribute values are typically available as distinguished names (DN) in the LDAP, and require additional lookup and transformation to convert them to identifiers. The support for/ease of doing this varies depending on the LDAP and SAML product. Other custom attributes can also be released for use in frevvo forms. In addition, the ‘frevvo.User’ role must be configured for any user to be authorized to access frevvo. The Add/Edit Tenant screens allow configuring the service and identity provider metadata as well as mapping the attribute names. Security in SAML is achieved via signing/encrypting the communication and this requires managing cryptographic keys. This can be setup in the key-store provided with frevvo.
While the user attributes can be discovered and saved on login, routing to other users requires user/role information to be available upfront. This can be accomplished using the bulk user CSV upload feature that is already available for use with the default security manager. Custom attributes, however, will not be persisted. With user information coming from 2 sources viz.  login and upload, the most recent data will be used. Complete information needs to be provided from either source as there is no support for merging data.