App

From UmsWiki
Jump to navigation Jump to search

UMS School App is available for iPhone, Android and Windows Phone. It will be designed with the school’s own logo, color and style. The app gives the basic functionality to see:

  • News
  • Timetable
  • Homework
  • Grades
  • User information

Additional licenses gives the ability to create, edit and see more information from various modules. For an overview of module requirement see "Additional functionality"

Prerequisites

Supported administrative systems

  • Userinfo: Easy-A, SIS and Lectio (Only mobile number).
  • Grades: Easy-A, Lectio and SIS
  • Homework: Easy-A and SIS.
  • Timetable: Easy-A and SIS
  • Attendance registration: Timetable data is retrieved from Easy-A, SIS, LUDUS, Tabulex and Lectio. Howerver, absence is only registered to Easy-A

Module requirements

  • UMS Web (contains and run all the webservice that is required for the app to receive information and communicate with the server)

Additional functionality

You get more functionality in the app by having the following modules, these are all optional:

  • Attendance Registration: Extended: gives “your attendance”, which shows student statistics
  • Attendance Registration for UMS School App: gives employee “attendance registration” and student the ability to call in sick
  • Homework: gives the employee the ability to create homework
  • Link Collection: gives links/bookmarks the school can setup
  • Parkzone Integration: gives the ability to create and edit parking permits from Parkzone
  • User info: gives “your information” the ability to edit the information. This also adds the functionality for the user to upload a new profile image (a selfie) to be used in the student id card
  • Student Id: gives the students a “student id card” and the employees an “employee id card”. To update their student id card profile image you’ll need the “User info” module
  • Employee Id: this is an id card for an employee similar to the student id
  • Parking (Parkzone/Apcoa)
  • User information (add/edit)

Note: All Attendance functionality requires Attendance Registration Basic.

Testing after setup

The app will be tested internally at inLogic before release. The test requires access to a user with relevant data. You can either create a fictional student who is associated to a real course, or alternatively use a real student's account, if the person agrees that the account is being used for a system test of the school's APP.

What to have ready

  • Important: The UMS site needs to use HTTPS and be public available. It needs a SSL certificate.
  • Materials that can be used for designing the app. For example: Logo, brochure, design guide line, etc.
  • Optional: It is possible for the school to have its own account where the app is located. An account in the App Store cost $99 per year, while an account for Google Play costs a onetime fee of $25. The school self-manage these accounts.

Physical hardware requirements

Having a smartphone is a necessity, either an Android, iPhone or a Windows Phone.

Should third party be contacted

If the school is using a dedicated hosting service, they have to be informed on how you wish the news feed should be setup.

Installation

  • Provide the UMS Web url path to inLogic (+4542408815). If you are running any kind of gateway (TMG, UAG etc.) you will need to create rules for the services on UMS Web, contact us for more information.

inLogic will publish the app either through inLogics account or your schools own account if you have acquired one. If you have your own account inLogic needs to be informed as well.

Technical settings

Each chapter only covers specific configuration that involves and applies to the app. For a full detail guide for each module open the corresponding manual. This manual also doesn’t include how to setup schedules task and services that isn’t directly affiliated with the app, the only exception is the service “UMS RSS Feeds” that is specific for the app.

If you can’t find the module you’re looking for in this guide please search for the page. E.g. ParkZone is not describe in this guide as there is no specific configuration that will affect the app alone. Be aware that some changes in the configurator listed in this guide will not only effect the app but also the UMS Web for that specific module.

Important Most changes will require an IIS reset on the server before it will take effect due to many settings is only loaded once when the website is initializing. The app retrieves settings from UMS once a day, so when you make a change it will take effect in the app the next day or when you log in.

Menu Settings

This describes how to modify which menu should be shown in the app.

  1. Open UMS Configurator
  2. Menu -> Web Setup -> Edit -> App
  3. Choose modules shown in App

In the example “Grades” has been disabled and will not be shown in the app.

News

This describes how to setup news for the app.

  • App News created from UMS Web
  • Add a RSS feed
  • Add Facebook feed

It is possible to use all three setups together. Combine as you like and set difference feed for difference templates.

Setup for App News from UMS Web

You need to create or use an existing AD group. This group will have access to create and modify news in App News on UMS Web.

  1. Open UMS Configurator
  2. Menu -> Web Setup -> Edit -> App
  3. Add the AD group for News Access group

Setup for RSS feed

Add server name for the service for RSS feed in Menu -> Modules -> Settings -> RSS Feeds

To setup Rss feed you will need the url for the rss. (E.g. http://inlogic.dk/feed)

Menu -> Templates -> Edit -> select template -> Rss Feeds

Manage -> Add… -> Fill in description, feed url and access token

Note: You only need an access token if the feed is from Facebook

The RSS feed runs as a service called “UMS RSS Feeds”. Default running every 5 min.

Restart the service to test it and check the output in /UserManagement/RSSFeeds.Log

Setup for Facebook news

If you want to use a Facebook page news feed, you need two things:

  • Facebook Page Url Feed
  • Access Token
Facebook Page Url Feed

To create the feed url

  1. Get your facebook page url
  2. Copy the name. E.g. “inlogic.dk”
    • Note: this can also be a number “142642699097242”
  3. Replace “inlogic.dk” with your name in this url

Your facebook page url feed should look something like this:

This is your feed URL.

Create a facebook access token

The personal Facebook account that you use to register as a developer does not need to be associated in any way with the page or group whose posts you want to display. You cannot log in to the Developer site using a Facebook Page or Business account. You must use the username and password from your personal Facebook profile. Facebook doesn’t allow businesses to register as developers, only individuals.

Please follow Facebook guide to enable yourself as developer on facebook.

When you have a facebook developer account and created an app go to Facebook Graph Explorer

  1. Select application
  2. Select “Get Token” and “Get App Token”
  3. Copy the Access Token

Now you have the access token you need to paste into the configurator.

Reload the service UMS Rss Feed in Services and look in the RSS Feed log to validate.

Grades

You can set the default view for grades, that filters the grades accordingly. The options are Course, Day and period.

Configurator -> Web Setup -> Edit -> App -> Default grade view

To specific the period you can set how your terms are set with start and end day for each period.

Configurator -> Modules -> Grades -> Select the Datasource -> Edit -> Terms

Depending on which administration system you’re exporting grades from the columns can vary. You can set which grades column should be used and in which order.

Configurator -> Web Setup -> Edit -> App -> Select grade columns

Grades in the app

The grades view in the App will change accordingly to which columns chosen, a max of 4 columns will be shown in the App. The columns will be shown for each grade in order from 1 to 4.

Your information

You can select which fields in user information that should be editable.

Configurator -> Web Setup -> Edit -> Userinfo

You need to set permission before the users are able to upload their own student photo (a selfie).

Configurator -> Web Setup -> Edit -> UMS Photo -> Enable Selfie in App

This will enable selfie function.

Student ID And Employee ID

Student ID uses user information and UMS Photo and has no configuration specific for the app.

Make sure Anonymous Authentication is enabled for the folder ‘Webservices’ in Internet Information Services (IIS) Manager for the Default Web Site

To let the users, change their student ID card profile image go to the chapter for My Information.

My Absence

The students are able to write an absence reason on an already registered subject. This can be enabled in

Template editor -> Select the template -> Absence -> Manage -> Create a new settings or select an existing one -> Add/Edit -> Check "Allow students to register absence reason"

In addition you can set how many days back the students are allowed to enter an absence reason.

Push Notification

Web Setup -> App -> Manage -> Add

Set the description

iOS APNS Certificate file:

  1. Receive the APNS Certificate file from inLogic
  2. Place the file in the root of the UMS installation (e.g. C:\Program Files\UserManagement)
  3. Write the name of the file (e.g. pushNotificationCertificate.p12) in the configurator

Android GCM Server Api Key:

  1. Receive the key string from inLogic and paste it

Windows Phone:

  1. Receive the Package SID and Client secret from inLogic and paste the strings

School account

In case the school has it's own account do the following to retrieve the information

iOS APNS Certificate file:

  1. Open https://developer.apple.com/account/ios/identifier/bundle
  2. Select App ID
  3. Edit
  4. Add Push Notification for Distribution
  5. Download and install the new iOS certificate
  6. Open KeyChain Access and right click your Apple Push Services package name and export to p12 file
  7. Place the file in the root of the UMS installation (e.g. C:\Program Files\UserManagement)
  8. Write the name of the file (e.g. pushNotificationCertificate.p12) in the configurator

Android GCM Server Api Key:

  1. Open https://play.google.com/apps/publish
  2. Google Play Console -> Settings -> API Access -> Create linked project and open it -> Credentials
  3. Create API Key
  4. Select the API Key and make key restriction for Android
  5. Type in your package name and SHA-1 certificate fingerprint
  6. Copy the API key and paste it inside GCM Server API Key

Windows Phone:

  1. Open https://developer.microsoft.com/en-us/dashboard/apps/overview
  2. Select your app
  3. Services -> Push notification -> WNS/MPNS
  4. Select "Live Services site"
  5. Copy and paste the Package SID into the configurator
  6. Generate an Application Secret if none exist
  7. Copy and paste the Application Secret into the configurator (This is the Client Secret)

FAQ

Untrusted Certificate Error on Android

Can't login on older Android mobile running a version between 4.1 and 5.1? This could be due to an untrusted Comodo SSL Certificate. We were able to reproduced it on Android version 4.1, 4.4.2 and 5.0.1.

You can test your SSL certificate on https://sslanalyzer.comodoca.com/

Do the following on the server

  1. Delete the Comodo RSA Certification Authority issued by Comodo RSA Certification Authority with an expiration date of January 18, 2038.
  2. Disable automatic root certificate updates on the server

Please checkout the Comodo support site: https://support.comodo.com/index.php?/Knowledgebase/Article/View/1019/38/untrusted-certificate-error-on-android

For future conservation:

Certificate is not installed correctly; the certificate needs to be chained back to the Addtrust root certificate in order to be trusted on the Android.

The issue is that the Windows server is not presenting the complete certificate chain; clients which do not have the complete certificate chain will result in this error as encountered on the Android phone. In order to resolve this, on the server which this certificate is installed on, please open the MMC (Microsoft Management Console), and add the certificate snap-in for the computer account on the local computer.

In the Intermediate Certification Authorities folder, verify if the Comodo RSA Domain Validation Secure Server CA and Comodo RSA Certification Authority(issued to Comodo RSA Certification Authority, issued by AddTrustExternal CA Root) are installed in this certificate store.

In the Trusted Root Certification Authorities folder verify if the AddTrustExternal CA Root is installed.  Also, if you see the Comodo RSA Certification Authority (issued to and issued by Comodo RSA Certification Authority with an expiration date of January 18, 2038) is present, if it is please delete this certificate.

If any of these certificates are missing  the intermediate and root certificates were provided to you in the .zip file when the certificate was issued, or are available via this support article - https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/979/108/domain-validation-sha-2 .

If you had to delete the Comodo RSA Certification Authority from the Trusted Root Authorities folder, you will also need to disable automatic root certificate updates on the server - https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/769/17/turn-off-automatic-root-certificates-updates-server-2008

If you have performed these steps and the certificate chain has not updated on the server, to force IIS to update the certificate chain you will need to either change the certificate binding in IIS to another certificate, and then switch the certificate bindings to the correct certificate. Alternately, you will need to restart the server.

Conservation for https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/769/17/turn-off-automatic-root-certificates-updates-server-2008

To perform this procedure, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority.

To turn off Automatic Root Certificates Update:

1. Click Start, and then click Run.

2. Type gpedit.msc, and then click OK.

3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.

4. Double-click Administrative Templates, double-click System, double-click Internet Communication Management, and then click Internet Communication settings.

5. Double-click Turn off Automatic Root Certificates Update, click Enabled, and then click OK.

6. Close the Local Group Policy Editor.

Note: You can use Group Policy to set policy settings that apply across a given site, domain, or organizational unit in Active Directory Domain Services.

Retrieved from "http://wiki.inlogic.dk/index.php?title=App&oldid=479"