Service Scheduler - Administration guide


Updating registration details

Login as an administrator user

Select the system menu (or padlock)

image.png

Navigation to System and search settings for "registration_", edit the entry

image.png

Enter the new key and press save

image.png

Service Scheduler - server installation guide

MySQL

See MySQL installation guide

Zero config / Auto Discover

See this guide for detailed setup of Zero config

System settings

System settings contain many default and system options for Service Scheduler. Care should be taken before adjusting these settings.

NOTE: For changes to apply it is recommended that users restart the application

To access system settings

image.png

Edit a setting to make changes

image.png

 

System setup wizard

A wizard is available to prompt an administrator through common system settings

image.png

User administation

Select administration area

image.png

Local user accounts

Creating a new staff member

Start the new staff wizard, enter required information if the user is required to login check the "Allow login" box

image.png

You can use the generate password button to create a password

image.png

Service scheduler will check for a similar name to ensure that the user 

image.png

Edit existing staff member

To find a staff member that has had their account disabled. Select the following button

image.png

Adjust user details as required

image.png

LDAP Integration (Active Directory)

To enable LDAP integration, navigate to system settings and search for "ldap"

image.png

ldap_allow_company This will look at the users "company" and if matches will allow login/ Blank will allow any company value.
ldap_allow_departments This will look at group the user is a member of and if they match a group name 
ldap_domain Your LDAP / Active Directory domain name
ldap_server_hostname The domain will be used to find a server via DNS but a specific server can be specified.
ldap_server_port Port to communicate for LDAP requests

Departments / Active Directory groups are the recommended method of controller 

image.png

As the password is controlled by LDAP, attempting to change the password will result in "User passwords are managed by LDAP integration"

image.png

Bulk Import

Create a CSV file with the following format.

dmsid fullname email_address username password administrator advisor technician
  Joe Boss joe.boss@company.com joe.boss #password2024! 1 0 0
  Joe Advisor joe.advisor@company.com joe.advisor #password2024! 0 1 0

image.png

User administation - account switching

When multiple dealerships are setup in Service Scheduler, users may be granted access to swap between sites without logging out and logging back in.

image.png

image.png

To enable, "Allow account change" must be checked in each account they are allowed to swap from. And the user must exist in all accounts with the same "username"

The passwords do not need to match, however in a local account setup it is recommended to avoid confusion if the user attempts to login to an account from the login dialog.

image.png

User administration - Azure

User administration - Azure

Register Entra application

Basic application setup

image.png

Create a new application and allow Web URL of http://localhost

image.png

Record Application (client) ID and Directory (tenant) ID for future use. 

 

Click Add a certificate or secret

image.png


Click new secret, and create an entry with required duration and name

image.png

Copy the value.

 

NOTE: you cannot view this value again.

Allow groups for authentication restrictions

image.png

To access group details the API needs Group.Read.All application permission 

image.png

Select Microsoft Graph

image.png

Select delegated permissions and search for group to add Group.Read.All

image.png

Confirm admin consent
User administration - Azure

Update global settings

You will need the Azure clientid, applicationid and secret from the Azure Application

image.png

Start the Service Scheduler Install / Upgrade wizard on the server

image.png

Click next until the Account Settings page and select "Global"

image.png

Set sso_entra_enabled to 1

 

Add the azure application details to appropriate value clientid, secret and tenantid

Stop service scheduler for prompting for account on login

image.png

To stop the prompt adjust global setting sso_entra_authorize_endpoint

image.png

https://login.microsoftonline.com/%tenantid%/oauth2/v2.0/authorize?client_id=%clientid%&response_type=code&redirect_uri=%redirect_uri%&response_mode=query&scope=%scope%&prompt=select_account

 

Remove the &prompt=select_account to disable.

User administration - Azure

Limit access to groups / UPN

For groups to work the Microsoft Entra application will need Group.Read.All permission

image.png

Start the Service Scheduler install and upgrade wizard

image.png

Select settings

image.png

Locate the settings sso_entra_allow_groups and sso_allow_upn_suffix

image.png

To limit access to certain group, add the group names separated by the ";" character.

image.png

To limit to user UPN suffix enter the userPrincipalName suffix