Sonic Forms 3.0.1807A Released

A new version of Sonic Forms is now available to all current customers. This release introduces important improvements and a number of bug fixes. The highlights include...
A new version of Sonic Forms is now available to all current customers. This release includes updates and improvements to:
  • Sonic Forms
  • VA Redirector
  • Sonic Forms Document Manager
  • Sonic Forms Document Display

Note the complementary productsSonic Forms Document Manager and Sonic Forms Document Display are licensed independently from Sonic Forms. You may not have access to these products if your license does not include them.

3.0.1807A Release notes

Highlights – Sonic Forms

  • Address Management improvements
    • Preferred fields for Primary Addresses (i.e. Mailing, Billing and Shipping) are now rendered as radio buttons instead of checkboxes.
    • If a preferred address is set (e.g. Home) where an address does not exist then that address will be created in iMIS.
  • Activity record support
    • Activity record Form Parts are now fully supported in this release.
  • Button Form Part Improvements
    • Mouseover Text - Buttons can now have optional mouseover text added to them to help document the exact behaviour that users can expect when selecting an option on your form.
    • CSS Class - Buttons can now have a specific CSS Class added to them to change the button format. This allows you to style your buttons individually. For example, a “Delete this Record” button could be displayed in Red instead of using a standard button style. In addition, buttons can be restyled as hyperlinks if appropriate using simple CSS changes.
    • Improved Interface - As part of the functional changes noted above the button Form Part selections have been reorganized and regrouped for clarity and ease of use.
  • Compatibility with iMIS Service Pack “K” and Higher
    • New Javascript features introduced with iMIS and higher caused a checkbox that was selected and marked as required to not be recognized. This has been addressed.

Highlights - Sonic Forms Document Display, Document Manager, VA Redirector

  • Updated Admin Interface
    • A new and cleaner administrative interface has been added to Document Display. The “Update Settings” button displays administrative options in a pop-up window and a help link has been added to the display.

Bug Fixes

Sonic Forms

  • SEQN option added to “Where” clause for Activity Records
    • Activity records can now be addressed by SEQN using the “Where” options. This means that these fields can load/save inputs based on the SEQN of the activity record as well as other available fields on the activity record. Note that the SEQN number needs to be exposed through a custom business object in iMIS as it is not available via the standard Activity business object.
  • Sign-up Fields - Confirm Email
    • Fixed issue with Confirm Email field stopping page from loading any fields below the Confirm Email field on a form.
    • Enhanced error message when the Confirm Email field is used without the primary email field on a form.
  • Improved Procedure Error Handling
    • In certain cases, unusual errors returned by a form’s stored procedures would sometime be interpreted as a “success” scenario and the form would complete processing without notifying the user of the problem.
  • Read-only field management
    • Fixed issue with read-only fields either:
      • writing no data to iMIS or
      • storing a description instead of code or vice-versa.
  • Additional Issues Resolved
    • Fixed issue with transient SQL error appearing during update/install process.
    • Fixed issues with Currency field not saving inputs and not accepting values in $0.00 format.
    • Fixed conflict when an integer field on a Multi-Instance table was set to “Load Last” and “Save New” when a field was Read Only where the system would store the value as 0.

Sonic Forms Document Manager

  • Language Setting Change Error
    • Fixed error when setting language from English to French/Spanish
  • Display Refresh Issue
    • Improved responsiveness of display when changing options between Download Only, Upload Only and Manage Documents modes


Posted under: Sonic Forms

Single Sign-on using SAML for iMIS

Visual Antidote is now offering a toolkit for Single Sign-on using Security Assertion Markup Language (SAML) integration. This industry standard approach allows multiple web properties using the SAML standard to use iMIS as their Identity Provider. iMIS information and roles can be synchronized automatically with compatible SAML Service Providers.

Single Sign-on Using SAML Overview

Security Assertion Markup Language (SAML) is an industry standard which allows two or more systems to share a common source of credentials. The credential source is known as an “Identity Provider” and is a secure source of personal information. An Identity Provider controls access to a user account via a strong password and login process. In Visual Antidote’s implementation of SAML this Identity Provider is iMIS.

Other participating websites or applications are known as “Service Providers”. A Service Provider is another website or application which has been provided a link to the iMIS Identity Provider. Visual Antidote is now offering an improved Single Sign-on package for our iMIS / Kentico clients that leverages iMIS as the Identity Provider and Kentico as a Service Provider.

Setting up SAML

Setting up SAML integration is easy. Here are the steps:

  • A new Identity Provider iPart is installed on iMIS along with a shared encryption key. This iPart works with the native Login applicable to your iMIS version.
  • A Service Provider web property (e.g. Kentico) is updated to use an iMIS URL as its login page instead of using its native login process. The shared encryption key is also installed on the Service Provider.
  • IQAs are used to define the information that will be sent from iMIS to the Service Provider(s). Visual Antidote provides standard IQAs as part of the installation which are adjusted as needed.

How it Works

When someone tries to access secure resources on a Service Provider website it sends a request to the iMIS Identity Provider instead of asking the user to login. The iMIS Identity Provider handles the login (either asking the user to login or, if they are already logged in, confirming their status) and authenticates the user. Once the user is authenticated, then an encrypted message is flowed back to the Service Provider in encrypted XML format. This message contains information about the user (ID, name, email, personal details) and their roles (customer, administrator, member, etc.).

The Service Provider uses the shared encryption key to decrypt messages from the Identity Provider. If the message decrypts properly, then the Service Provider logs the user in without further interaction being required and refreshes the user’s information in the Service Provider website.

SAML uses assertions to enable an Identity Provider to securely communicate attributes and privileges of a user to a Service Provider. Assertions carry detailed information about the user, including (for example): what application rights they have, if they are allowed to access multiple applications, how long they may access the application and much more.

Visual Antidote’s SAML implementation uses IQAs to define the assertions provided by the iMIS Identity Provider. This means that each client can easily tailor their SAML configuration to provide exactly what data is required by the receiving system(s). For example, if someone has a member type of “Life” and status of “Gold” then a badge could be displayed on the Service Provider site since this information can be passed forward from iMIS to the Service Provider.


  • SAML is an industry standard approach to Single Sign-on and is supported by multiple applications and services. Because it is platform independent, clients can expand their supported systems and services easily by using SAML integration. For example, an association partnering with a regional affiliate can allow their members to access the affiliate website without having to share any data or logins directly.
  • SAML is highly secure. By using a shared encryption key between systems clients can have a high degree of confidence that user data is fully protected while in transit.
  • SAML offers an excellent user experience. SAML provides the ability for users to securely access multiple applications with a single set of credentials entered once. Visual Antidote’s implementation between Kentico and iMIS also allows our clients to ensure that a user is logged into all related web properties in a single step and similarly ensures that a logout event is processed on all websites. Using SAML, users can seamlessly access multiple applications, allowing them to conduct business faster and more efficiently.

Find out more

Visual Antidote’s SAML integration is available as a specific implementation package and is tailored to the specific versions of iMIS. Visual Antidote also offers a Service Provider implementation for the Kentico platform and can assist with configuring Service Provider configurations in other popular web platforms (e.g. Wordpress, Drupal, Learning Management Systems, etc.). For more information, please contact Visual Antidote.

Posted under: iMIS Consulting, Kentico Consulting