Forum Discussion

MarkSchwanke's avatar
MarkSchwanke
Boss
3 years ago

How to identify SSO ID for Digital Adoption Platform?

  <script> window.Appcues.identify( "<<< USER_ID >>>", // unique, required { // recommended (optional) properties createdAt: 1566932390, // Unix timestamp of user signup date purc...
FreeMarker
  • MarkSchwanke's avatar
    MarkSchwanke
    3 years ago

    I heard back from my CSM. So it turns out that if I use ${user.ssoId} it will work for AppCues, and possibly other Digital Adoption Platforms in the Page Head bottom Content of the Community Wrapper.  It's important to use an uppercase I in Id as ${user.ssoid} will result in errors.

    <script>
window.Appcues.identify(
  ${user.ssoId},  // unique, required
  {

  }
);
</script>

<script>

     

Parshant's avatar
Parshant
Boss
3 years ago

MarkSchwanke,

personID = '${personID}'; should be the unique id, You can use user-id or email any of them.
There is no justification for this, but this should be unique.

Mostly companies used SSO-id for internal and for security purpose. For Security and best practices around this should not be shared over browsers or can not be visible while viewing the source code and should be avoid to share it to track with anyone or third party tools for users.

So its better to use ${user.id}.

Also do add your code inside user login condition, so this will not pass empty values when there is an anonymous users browsing into the community.

<#if user.anonymous == false && user.registration.complete == false >
write your script code here
</#if>
  • MarkSchwanke's avatar
    MarkSchwanke
    Boss
    3 years ago

    Parshant Thanks I did try ${user.id} and it did work and pulls in the Khoros ID as expected. 

    I appreciate the warning about the SSO ID and will discuss with our security person.

    I couldn't get it to pull in the SSO ID though so something must not be right with my syntax still.  Looks to be that when I'm logged in to admin account and bypassing the SSO login and no SSO login exists it doesn't like it and gives me this error (See below) so I need to figure out what the default value should be when admins and support are logged in but don't have an SSO ID so I can avoid sending them on walk throughs but still have that distinct from someone who is guest browsing who we do want to get prompted by DAP.

    ----
Tip: If the failing expression is known to be legally refer to something that's sometimes null or missing, either specify a default value like myOptionalVar!myDefault, or use <#if myOptionalVar??>when-present<#else>when-missing</#if>. (These only cover the last step of the expression; to cover the whole expression, use parenthesis: (myOptionalVar.foo)!myDefault, (myOptionalVar.foo)??
----