ProjectWise SDK - Bentley IMS Login

Question

I need to use the ProjectWise SDK (not the pwps_dab module) to login using Bentley IMS authentication. The documentation indicates 'aaApi_LoginWithSecurityToken' is the function but I'm not sure how to acquire the 'security token'. Does anyone have a working example they can share?

Dan Williams · Accepted Answer

My apologies for the delay, but I have a working sample up on github now. https://github.com/DanWilliamsAtBentleyDotCom/Sample-Login-With-Security-Token 
 Please give it a try and let me know if it worked or what specific problems you are having when you run a debugger against the code. 
 I used Visual Studio 2015, ProjectWise v10.00.03.140, ProjectWise SDK v10.00.03.140, CONNECTION Client v10.00.18.13 and tested against two different datasources using two different IMS accounts. 
 Oh, and I'd like to point out that the cleverness of the class ConnectionClientToken.cs, is all Dave Brumbaugh's work! If you haven't done so yet, you can get his MostOfDavesClasses.cs (and supporting files) at https://github.com/DaveBrumbaugh

Dan Williams · Answer

I mean to post some code for this, but here's a snippet that may help you, but it is in C#, so you man need to use MostOfDavesClasses. 
 You can get that code with the link in this post: https://communities.bentley.com/products/programming/projectwise_programming/m/mediagallery/273950 
 However that link doesn't demonstrate using IMS authenication. 
 So here's the snippet: 
 
 using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.Runtime.InteropServices;

namespace SampleIMSConsole
{
 class Program
 {
 [DllImport("c:\program files\bentley\projectwise\bin\dmscli.dll", CharSet = CharSet.Unicode)]
 private static extern bool aaApi_LoginWithSecurityToken(string dataSource, string securityToken, bool asAdmin, string hostname, long[] productIds);

 // BOOL aaApi_GetRelyingPartyIdentifier(LPCWSTR pServerName, LPWSTR* ppRelyingPartyIdentifier )
 [DllImport("c:\program files\bentley\projectwise\bin\dmscli.dll", CharSet = CharSet.Unicode)]
 private static extern bool aaApi_GetRelyingPartyIdentifier(string serverName, ref string relyingPartyIdentifier);

 static void Main(string[] args)
 {
 if (args.Length > 0)
 {
 string _loginToken = ""; // MyLoginCommands.GetLoginToken(DatasourceName);

 string relyingParty = "";
 string serverName = args[0].Split(':')[0];
 bool relyingPartySuccess = aaApi_GetRelyingPartyIdentifier(serverName, ref relyingParty);

 // Contact the Connection Client and ask for the login token.
 try
 {
 Bentley.Connect.Client.API.V1.ConnectClientAPI conn = new Bentley.Connect.Client.API.V1.ConnectClientAPI();

 _loginToken = conn.GetSerializedDelegateSecurityToken(relyingParty);
 }
 catch (Exception ex)
 {
 }

 if (aaApi_LoginWithSecurityToken(args[0], _loginToken, true, null, null))
 {
 Console.WriteLine(string.Format("Logged in OK to '{0}' with BentleyIMS.", args[0]));
 }
 else
 {
 Console.WriteLine(string.Format("Error logging in to '{0}'", args[0]));
 }

 }
 }
 }
}
 
 HTHs

Dan Williams · Answer

Matthew, 
 "Good news", I can reproduce your problem. 
 Using a federated account, I get a valid token with the same code as you did, but when I try to log into my datasource with a federated account, it fails with the same error message as you received. However, for my test case, the error message was correct. My target datasource doesn't have an account matching what I used for the CONNECTION Client! If I use the same CONNECTION Client session for a datasource where that federated account has a matching user account (and enabled, etc.), it works! 
 So, can you please verify that the user credentials you are using for your CONNECTION Client are the same as the federated account in your target datasource?

Matthew Howdill · Answer

Unfortunately its still not working via the API: 
 
 My working directory exists locally; 
 CONNECTION client is signed in using the same account; 
 Tried switching my account from federated to logical (preserving the federated identity); 
 
 I can login using pwps_dab "New-PWLogin -DatasourceName $DatasourceFullName -BentleyIMS" no issues. I'll keep testing and feedback. Enjoy the weekend.

Dan Williams · Answer

The error message is indicating that you cannot connect to that server, so I would start by checking out that you can connect to that server/datasource with the credentials currently in use by the CONNECTION client. 
 So, ss the CONNECTION Client up and running? And if so, can you sign into the datasource with your current credentials used by the CONNECTION Client?

Dan Williams · Answer

Well, I'm not sure what you are asking. You cannot sign into a datasource if the account you are using doesn't exist in that datasource. Your account simply doesn't have access if it doesn't exist in the target datasource. Am I missing something in your question? 
 So, my answer to your question, as I understand it, would be to add the user specified in the CONNECTION Client to the datasource. 
 Alternatively, sign into the CONNECTION Client with a user account that does have access to the datasource.

Dan Williams · Answer

Well, I'm not sure if there is a "good source" for explaining "unknown, unknowns". There is documentation included with each product, and there are online sources for documentation, but there are always "assumptions" made by authors of any documentation (or software products!) on what the target audience already (or should) know. 
 I too, like many others, struggle to "keep up" with the latest features and offerings, so I can understand (and relate) to your frustrations of "not understanding" some particular topic/feature/issue/etc. All I can offer is encouragement, and ideally, answers to specific questions. 
 If you need help, you are doing the "right thing", i.e. searching as best you can for an answer, and then by posting your questions on Bentley Communities!

Dan Williams · Answer

Ramnath Muralidhar , 
 I'm not sure of the purpose of your last post. Is there a question? Or perhaps you just want to show your (now working) code for the benefit of others, which is always appreciated by the way! 
 FWIW, I verified that your posted code works for one of the available datasources that I have access to. 
 My only "negative" comment about your code would be that you are not checking the return values for failure, and of course, that means any failures go unreported, but that's OK for a "code snippet" as it makes it easier for folks to see the flow of the process and not get "distracted" by the error handling, etc. 
 Take care!

ProjectWise SDK - Bentley IMS Login

Top Replies