2.5 XME.digital features : XME.digital platform documentation

TABLE OF CONTENTS

1. Anylogin
2. Multitenancy
3. Attribute Based Access Control
4. ABAC advantages
3. Domain Objects
4. Balances
5. Logic Extension Points
6. Dashboards and Widgets
7. Timelines

1. Anylogin

The default authentication flow requires users to pick their unique username and password when signing in. Some systems offer to enter email or phone number as a username instead. XME.digital provides an alternative to both and allows customers to sign in using multiple login identifiers.

Anylogin functionality enables customers to sign in the system using a username or email address, or phone number (plus password, of course). Customers are free to insert any of pre-configured login types into login form’s username field.

By default XME.digital offers three ways of authentication:

Email and Password
Phone number and Password
Username and Password

Picture 3. Anylogin

Besides users are able to sign in for XME.digital using their social network credentials, such as Linkedin, Facebook, Google, Twitter.

Anylogin is an out-of-the-box authorization mechanism that is available to all customers by default. Once system user has specified his username, phone number,

email at the system account settings he can use any of this information as login credentials.

2. Multitenancy

Multitenancy is an architectural feature of XME.digital allowing to provide a dedicated space (tenant) for each customer. A tenant serves to a group of users with specific privileges who share common access to their exclusive instance. It can be compared with a turn-key property rental in an apartment building, where a lodger does not have to be concerned about engineering the base, connecting to the facilities, accessing the entrance of the building and so on because he gets all public utility services with his flat.

The multitenant architecture allows customers to get a dedicated software with its data, configuration, individual functionality, user management and access rules. Such multitenant approach provides a possibility to various customers use XME.digital common environment in own way, since each of them having a dedicated secure space.

Each tenant is isolated and invisible to other tenants so customers do not have a feasibility to access each other's data. Information security is supported on the architectural level – the distinction between the tenants has been accomplished during the solution design.

Picture 4. Multitenancy

The Multitenancy provides a high level of customization to satisfy the company's needs. XME.digital supports customization of the user interface, business logic, workflow and access control.

3. Attribute Based Access Control

Attribute-based access control (abbreviated as ABAC) is an authorization model that provides dynamic, context-aware and risk-intelligent access control. ABAC evaluates available descriptive data (attributes) against stored policies to determine whether the user is authorized to access the requested resource. This authorization model helps XME.digital users to configure larger and more definitive set of rules to express tenant access policies.

For example, with the help of access-control model it is possible to set the rules, like:

User A can access all entities of his company.
User B can access all entities of his department.
User C can access entities he created.

In ABAC each separate action is evaluated against the attributes of entities (subject and object), operations, and the environmental conditions relevant to the request, while other access control paradigms consider each request in terms of isolated user role and the type of action that need to be performed.

Picture 5. ABAC

4. ABAC advantages

Easy to understand and configure permissions mechanism.
Effective control over the number of rules and conditions so it is easier to maintain.
Access control permissions are evaluated in real-time when actual request is made.
Ability to add attributes based on the existing infrastructures.

This approach has no restrictions: users can apply the rules of any complexity, including those that contain some unknown attributes. Due to the comparatively clear business logic and compact configuration ABAC makes it possible to avoid many of the costs associated with maintenance when implementing complex rules and provides absolute control over the actions and data inside the tenant, making it ideal for dynamic projects with rapidly changing requirements.

5. Domain Objects

A domain object is a concept that represents an entity from a domain model related to the software and implements the business logic of its work. For example, the software solution for orders management can contain such domain objects as "order", "order item", "invoice". Domain objects encapsulate information about the entity in the business domain, which is necessary for the software, that makes it understandable for non-technical people, such as business representatives.

XME.digital entities are created and configured dynamically within a tenant, where an administrator can specify and flexibly configure attributes, lifecycles and their relationships with other entities (domain objects) to cover customer’s problem area.

Picture 10. Timeline

If you’d like to learn more about XME.digital domain objects read our article ‘How to specify domain objects’.

6. Balances

The Balance Management provides activities related to the creation and maintenance of the balances of a customer and/or a subscriber. Balances may be shared (e.g. between subscribers in a hierarchy).

Types of balances include:

Monetary balances
Non-monetary balances (e.g. free unites, quota, tokens, etc.)

The balance management supports the definition of policies per balance or balance type. Policies include:

Minimum Allowable Balance limit (e.g. balance must remain above zero).
Balance expiration dates.
Balance thresholds actions and notifications.

Balance management operations include:

Unit reservation from a balance for a specified interval (session). Unused units are credited back into the balance when the session is released.
Release of reserved unit
Balance prioritization based on policy/rules
Balance inquiry.
Support for multiple simultaneous sessions that affect a common balance.
Splitting charges between multiple balances.
Application of a payment to a balance.

Picture 7. Balance

with its own period of availability (which may then be further restricted by the rules the balance appears in) or
marked with a label to identify a specific portion of a balance

Such a value with a certain validity period or a specific label is called a pocket (P). The validity start and end of a pocket can be configured based on

date level, so that the validity of a pocket starts on day x at 00:00:00 and ends at day y at 00:00:00 or
date and time level, so that the validity of a pocket also depends on the time of day, so when the pocket is created on day x at hh:mm:ss, the validity ends on day y at the same time on hh:mm:ss.

In the example, the value of the balance B3 is the sum of the values of all pockets P1, P2 and P3, which are valid at this point of time.

Picture 8. Balance values

7. Logic Extension Points

LEP is a middle between the need for time-consuming full development and low-code/no-code platforms with pure visual tools. Many startups and enterprises focused on delivering applications for innovation, customer engagement, operational efficiency, or legacy migration are recognising the inherent business value and time-to-market advantages of using simple scripting coding (based on the Groovy).

XME.digital with LEP functionality for application development that employ declarative techniques instead of programming are available to customers at low- or no-cost in money and training time to begin, with costs rising in proportion of the business value of the platforms.

Picture 9. LEP

There are several important drivers:

Operation-driven development

LEP offer more intuitive ways to build applications, minimising the use of coding. This approach enables a range of users - from professional developers to citizen developers.

Reusability

Productivity can be further accelerated with LEP that promote reusability through out-of-the-box templates, plug-ins, business components, and connectors to emerging technologies.

Support beyond the build phase

XME.digital with LEP are designed to support the entire app lifecycle: design, build, deploy, manage and iterate.

Cloud-native deployment

XME.digital offer the flexibility to deploy and manage applications in the cloud of your choice, or even on premises. Offering automated deployment along with a cloud-native, stateless architecture enables out-of-the-box high availability and fail over to support large-scale deployments, particularly in an enterprise context.

8. Dashboards and Widgets

A dashboard is a visual display of the most important information needed to achieve different objectives, arranged on a single screen, so the main information can be seen at first sight. In other terms, they are a collection of widgets that give an overview of the most important data.

XME.digital, allows to create multiple dashboards, which, helps to navigate faster through the System and allows to configure dashboards, for different users. For example, simple user can have access to only certain dashboard, while other user, to the other one. Also, dashboard logic depends mainly on the business task.

A widget is a mini-report that can display your data in a number of different presentation styles, including simple graphics, charts, tables. On the specific dashboard, they can show information about bookings, revenue or completed tasks. Widgets, can be different. For example, Stats Widget can give the information about number of active accounts and, in the same time, about number of cars. The thing is, that they can be the same type, but they give different information, from different applications, for different dashboards.

Widgets can contain not only plain static numbers, but also, they can perform different active functions. For example, Tasks Widget, where you have functionality such as adding tasks, changing reminders, creating events, editing and completing tasks is available straight from your home screen.

There are widgets that can not be configured, while others can be for specific client needs, like:

Welcome Widget
Sign-in/Sign-up Widget
Entity Widget
Stats Widget
General map Widget
Weather Widget
Clock Widget
News Widget
Markdown Widget
Tasks Widget
Entities list Widget

9. Timelines

A timeline diagrams present events during specific intervals shown chronologically along a line. Timelines are used as a control and monitoring tools. They can highlight important events and required information in the current context to provide additional information on how the process can be optimized and therefore increased.

As an example of timeline, it can be a history of the bank operations. It can include different operations (cash withdrawal, payments, receipts and other business transactions). The start point can be the first transaction of account, the last point will be the most recent transaction. It allows to see how money are moved through account and for what reason.