PROCESSIT Mobile Installation

Introduction

This document describes how to install and use the licensed Add-on module PROCESSIT Mobile.

Via PROCESSIT Mobile, users can view their approval notifications in a worklist, select and view invoice details and all associated lines, view the originally scanned invoice image, and to perform an approval or rejection action, and add respective comments as needed. The PROCESSIT Mobile Worklist displays all approval tasks for the user of the mobile device.

User access to PROCESSIT Mobile can be administered by associating a user's Oracle E-Business Suite Role with a PROCESSIT PDAUser. This is done in the PROCESSIT Configuration Manager.

PROCESSIT Mobile can be accessed either by typing the URL directly in a mobile browser, or via the mobile link in an email notification related to an approval task, if these are enabled. If accessed via the email notification, the user is directed to the task details for the approval task.

System Requirements

PROCESSIT Mobile add-on license module requires:

• ReadSoft PROCESSIT Standard License (Version 7.1 R3 or later)
• Oracle WebLogic Server 10.3.2
• Oracle ADF version 11.1.1.2.0
• Access to the Oracle SOA Suite used for PROCESSIT (Oracle BPEL Process Manager (a component of Oracle SOA Suite) 10.1.3.5 patched to the latest MLR2 level)
• As an added security measure, it is recommended that secure access be facilitated through the implementation of a VPN.

Note that the PROCESSIT version number and PROCESSIT Mobile version number must match.

Mobile URL access

PROCESSIT Mobile Console is accessed via the URL [protocol]://[hostname]:[port]/mobi - replace protocol, hostname and port with the appropriate values.

WebLogic Installation

PROCESSIT Mobile can be installed on either the same WebLogic instance as PROCESSIT or on a separate WebLogic server.

To install and setup the WebLogic server for PROCESSIT Mobile, follow the guidelines in the PROCESSIT Installation Guide.

If using VPN, it is recommended to install PROCESSIT Mobile on the same WebLogic instance as PROCESSIT.

If setting up PROCESSIT Mobile as part of a DMZ configuration, installing PROCESSIT Mobile on a separate WebLogic instance is required.

Using SSL with Weblogic Server (https)

If SSL is desired, follow the instructions for SSL configuration when installing the WebLogic AdminServer.

SOA Suite Access

The WebLogic server hosting PROCESSIT Mobile must have access to the same SOA Suite as PROCESSIT. Include the SOA Suite Server in the host file of the WebLogic server, similar to what is done during the standard PROCESSIT installation.

If PROCESSIT Mobile is outside the firewall, ports 7777 and 1521 on soa.vm.net must be accessible to the PROCESSIT Mobile server.

Installing PROCESSIT Mobile

PROCESSIT Mobile is installed using the PROCESSIT Mobile installer. If you are installing PROCESSIT Mobile on the same WebLogic host as PROCESSIT, begin with Running the Installer. For more details on the standard installation process, see the PROCESSIT Installation Guide..

Installation Procedure

1. Create an installation directory on the installation pc, and unpack the PROCESSIT Mobile software package to the directory.
2. Edit the properties file to reflect your environment settings. PROCESSIT Mobile uses the standard PROCESSIT configuration file structure: [inst.root]/config/processit.properties
3. Setup WebLogic Server Database Connections. If installing on a separate WebLogic server, these data sources are required:
   • D4_DB_D4
   • D4_OEBS_APPS
   • soadbDS
   • These are some of the same connections as for PROCESSIT Standard Edition. Details on how to create them can be found in the PROCESSIT Installation Guide.
4. Add host file entries to the WebLogic and installation PC hosts files for:
   • Weblogic Server: weblogic
   • SOA Suite Server: soa.vm.net
5. Run installation by navigating to [inst.root] and executing the command:
   • Linux: install_mobile_console.sh
   • Windows: install_mobile_console.bat
6. In Components Install, click Install all to install all components. If any errors occur, double-click the component to see the log. When the problem is resolved, select the individual components and click Install.
7. Installation is complete.

Configuration

PROCESSIT Mobile is configured in the PROCESSIT Configuration Manager.

Autologin

The configuration parameter Security Level determines if users must supply login credentials when accessing PROCESSIT via email notifications. It also controls the Autologin feature of PROCESSIT Mobile.

If you select Login is not required from mail but still in console, the autologin feature is enabled provided these conditions are met:

• The user has previously logged into PROCESSIT Mobile.
• The browser has cookies enabled.
• The user is returning from the same remote host (which should occur if VPN is in use).

If you choose Login is required from mail, users must supply their credentials every time they log in to PROCESSIT Mobile.

The autologin feature is supported both via URL Access and email notification link access.

Autologin works by matching both your token value from your cookie and the remote host from your last successful login.

The database table D4_MOBI_AUTOLOGIN contains information about users who have logged in to PROCESSIT Mobile at least once. UserId and Password are retrieved during automatic login, if it is enabled. The table is updated every time a user logs in or out. The information includes last login date, current login status and a DISABLE_FLAG to deny access to a given user.

Archive Servlet

The configuration parameter Mobile Console Show Document URL must be setup to point to the ArchiveServlet instance installed on the WebLogic server hosting PROCESSIT Mobile, in order to handle invoice images to be viewed from PROCESSIT Mobile.

Mobile Console Hostname

The configuration parameter Mobile Console Hostname defines the protocol, hostname and port of the WebLogic Server hosting PROCESSIT Mobile. The defined hostname and port are used in all approval task email notifications.

If email notifications are enabled, each Approval Task email notification includes a link to access task via PROCESSIT Mobile. The Mobile Console Hostname supplies the protocol, hostname and port information used in the construction of the PROCESSIT Mobile URL.

PDAUser Role Mapping

For standard Oracle E-Busines Suite fnd_users implementation

FND_USER implementations of PROCESSIT use the D4_ROLES_RESPONSIBILITIES table:

• Map EBS_RESPONSIBILITY to the predefined BPEL_ROLE for PDAUser.
• The default value for PDAUser is SYSTEM_ADMINISTRATION

For Employee user implementation

EMPLOYEE implementations of PROCESSIT use Configuration Manager:

• Navigate to User Maintenance in PROCESSIT Configuration Manager.
• Map role PDAUser to a given user by selecting the role from the available drop down list.

Denying access

There are three ways to deny a user acces to PROCESSIT Mobile:

• Set DISABLE_FLAG to Y in the D4_MOBI_AUTO_LOGIN table for the USER_ID that should be denied access.
• Remove the Oracle E-Business Suite user from the role mapped to PDAUser (FND or Employee).
• Disable the user in Oracle E-Business Suite (FND or Employee)

Remote Access notes

PROCESSIT Mobile can be accessed by using a standard solution for VPN access. Please refer to company policy and guidelines for configuring and allowing VPN access to your network and applications.

VPN access to PROCESSIT Mobile has been internally certified and tested using Cisco AnyConnect. See the AnyConnect SSL VPN on Cicso ASA 500 Installation guide for more details.

BlackBerry Enterprise Server (BES) for DMZ

Access to PROCESSIT Mobile from a RIM BlackBerry device requires that the WebLogic server is accessible from the BlackBerry Router. This can be either the BlackBerry Router already installed as part of the BES or a stand alone BlackBerry Router installation for a DMZ configured environment. See Placing BlackBerrry Router in the DMZ guide for more information.

Implementing in a VPN Configuration

To allow VPN access, PROCESSIT Mobile can be installed on the same server as PROCESSIT. Follow your standard company VPN process to setup access to the PROCESSIT Mobile solution.

Implementing in a DMZ Configuration

You can choose to install PROCESSIT Mobile in a DMZ configuration for added security. In this configuration, the PROCESSIT Mobile server is segmented from that of the PROCESSIT Application Server, allowing for additional security protection to the internal network.

Device Setup

VPN Client Access

It is recommended that you enable secure access to the application through a VPN connection. Follow your company policy and guidelines for installing a VPN client on mobile devices.

PROCESSIT Mobile has been internally certified and tested using Cisco AnyConnect. However, we do not have reason to believe that other commercially available VPN applications should encounter problems.

Example Client Install Cisco AnyConnect for Apple iPhone

Procedure for installing the Cisco AnyConnect client on an Apple iPhone:

1. Minimum OS version is IOS 4.2.1
2. Visit the App Store and search for AnyConnect. The application is free.
3. Download and install the AnyConnect Client application.
4. Open the client application and select Add VPN Connection.
5. Enter the vpn hostname address
6. During log in, you must provide a username and password or token.

Mobile Browser Requirements

PROCESSIT Mobile requires that you use a mobile browser that supports cookies and javascript. This is an example procedure for configuring browser options on a BlackBerry device.

1. Navigate to Browser → Options
2. Enable javascript
3. Set the browser to Accept cookies
4. Save and exit options

Supported Devices

PROCESSIT Mobile has been internally certified and tested with the following devices: