Skip to main content

Lucid✓ Verified

· 8 min read
Pradeep Kadambar
Pradeep Kadambar
Creator
Lucidchart is a web-based diagramming and visualization tool that enables users to create flowcharts, diagrams, mind maps, and more. It offers collaborative features for teams to work together in real-time, enhancing communication and productivity. With an intuitive interface and various templates, Lucidchart simplifies complex concepts into clear visual representations.

Identities ❌ | Accounts ✔️ | Groups ❌ | App Roles ✔️ | Entitlements ❌

Application​

Steps

  1. Login to RSA G&L console as System Administrator.
  2. Navigate to Resources > Application.
  3. Click on Create Application and select Other Application.
  4. Enter the details as shown below.
    img
  5. Click Finish.

Account Collector​

This section explains the process for configuring an account collector for the Lucid application. We will use the RSA G&L Generic REST collector 1 for this purpose.

Steps

  1. Login to RSA G&L console as System Administrator.
  2. Navigate to Resources > Applications.
  3. Click on Lucid.
  4. Navigate to Collectors tab and click on Create Account Collector. Enter the details as shown below.

    img
  5. Click Next and enter the connection details.

    img
    .
    💡 Info: Lucid only supports OAuth authentication type. Refer to OAuth2 for more information.
  6. Click Next. Select the data types that the collector will be collecting from Lucid

    img
  7. Click Next. On the Account Data page, enter the following configurations.

    Alt text
Request
MethodGET
URL/users
Request Headers
Acceptapplication/json
AuthorizationBearer ${AuthenticationToken}
Lucid-Api-Version1
Response Mappings
AccountId$.*.email
Id$.*.userId
UserName$.*.username

  1. Click Next. In the Map Collector Attributes to Account Attributes, map the collected account attributes.

    Alt text
  2. Click Next. In the Map Collector Attributes to Account Mapping Attributes, map the user reference attribute.

    Alt text
  3. Click Next. In the User Resolution Rules, map the user to account.

    Alt text
  4. Click Finish. Use the Test function to make sure the configurations are accurate.

Entitlement Collector​

This section explains the process for configuring an entitlement collector to collect site roles and assignments from the Lucidchart application. We will use the RSA G&L Generic REST collector for this purpose.

info

Since Lucid does not provide an API for listing admin roles, we will use a custom web service for the EDC. Refer to Custom Web Service : Admin Roles for more information.

Steps

  1. Login to RSA G&L console as AveksaAdmin.
  2. Navigate to Resources > Applications.
  3. Click on Lucid.
  4. Navigate to Collectors tab and click on Create Entitlement Collector. Enter the details as shown below.

    Alt text
  5. Click Next and enter the connection details as shown in Step 5 of Account Collector. 💡 Note that the Use Base URL for all API(s) will be unchecked.
  6. Click Next. Select the data types that the collector will be collecting from Lucid.

    Alt text
  7. Click Next. On the App Role Data page, enter the following configurations.

    Alt text

    Alt text

Request
MethodGET
URLhttps://instance.securid.com/aveksa/custom/external_jsp/LucidAdminRolesv1.jsp
Request Headers
Acceptapplication/json
Response Mappings
ApplicationRoleId$.roles.*.role
Description$.roles.*.description
  1. Click Next. On the App-Role Account Membership collection page, enter the following configurations.

    Alt text

    Alt text

Request
MethodGET
URLhttps://api.lucid.co/users
Request Headers
Acceptapplication/json
AuthorizationBearer ${AuthenticationToken}
Lucid-Api-Version1
Response Mappings
Application Role Id$.*.roles
Account Identifier$.*.userId
  1. Click Next. In the Map Collector Attributes to App Role Attributes, map the collected account attributes.

    Alt text
  2. Click Next. In the Account Evaluation, map the account collector to account value.

    Alt text
  3. Click Next and then click Finish. Use the Test function to make sure the configurations are accurate.

Application Setup​

This section explains the process of setting up Lucid for integration with G&L.

Steps

  1. Login to Lucid Developer Console, https://admin.lucid.app/developer. You need to have Developer Tools enabled by the Lucid admin for your organization.
  2. Click on New Application.

    Alt text
  3. Provide a suitable name and click Create.

    Alt text
  4. Click on OAuth 2.0 tab.

    Alt text
  5. Provide a client name and click Create OAuth 2.0 client.

    Alt text
  6. Copy the client id and client secret.

    Alt text
  7. Click on Add Redirect URI and add the G&L OAuth call back URL https://instance.securid.com/aveksa/oauth/callback.

    Alt text

Authentication​

OAuth2​

This section explains the process of setting up RSA G&L ADC with OAuth2 authentication.

Steps

  1. Login to RSA G&L console as System Administrator.
  2. Create or Edit a generic REST ADC that will be using OAuth2 authentication.
  3. On the Connection Details page, configure the following.

    Alt text

Request
Client ID-
Client Secret-
Authentication URLhttps://lucid.app/oauth2/authorizeAccount
Access Token URLhttps://api.lucid.co/oauth2/token
Scopeoffline_access account.user:readonly
  1. Click on Get OAuth 2.0 Access Token.
  2. Click on Proceed For Authorization.

    Alt text
  3. Login to Lucid account.

    Alt text
    Alt text
  4. The below message indicates that RSA G&L has successfully acquired a token.

    Alt text
  5. Click Close.
  6. Save the collector configuration. Use the Test function to make sure the configurations are accurate

Custom Web Service​

Admin Roles​

Since Lucid does not provide an API for listing admin roles, we will use a custom JSP that will publish the admin roles.

Steps

  1. Open a text editor and save the contents below as LucidAdminRolesv1.jsp.
<%@ page language="java" contentType="application/json" %>
<%
    String jsonData = "{"
        + "\"roles\": ["
        + "{\"role\":\"billing-admin\",\"description\":\"Billing admins can change payment options for the account.\"},"
        + "{\"role\":\"document-approver\",\"description\":\"Document approvers can approve documents.\"},"
        + "{\"role\":\"team-admin\",\"description\":\"Team admins can access and edit team settings, including user roles and groups.\"}"
        + "]"
        + "}";
%>

<%
    response.setContentType("application/json");
    out.print(jsonData);
%>
  1. Login to RSA G&L console as AveksaAdmin.
  2. Navigate to Admin > User Interface.
  3. Click on Files.
  4. Select External JSP Pages and click on Upload.
  5. Select the LucidAdminRolesv1.jsp and click OK.
  6. Verify by accessing this URL in the browser https://instance.securid.com/aveksa/custom/external_jsp/LucidAdminRolesv1.jsp

References​

COL010

Footnotes​

  1. Developer Docs ↩