How to Example: Edge Encryption Rules Creation When Using a Customized Service Portal Page

Description

This article presents an example for creating a customized Edge Encryption Rule when a record is created from a Service Portal page for a specific use case as an example. This is just a single example, the creation of Edge Encryption rules can differ widely depending on what the user is trying to accomplish. This article should not be considered a guide for writing any and all Edge Encryption Rules.

The purpose for writing this Edge Encryption rule is to allow a single encrypted field to be encrypted successfully when submitting a Service Portal form from an Edge Proxy logged in user.  In this case the table to be encrypted is incident with a single string column being encrypted.

Steps to Reproduce:  

1. Make sure these plugins are activated: 

1. Create a new column in the incident table:
   
   • Navigate to System Definition > Tables > Open Label = Incident
   • Select Table Columns > New
   • Fill out the form:
     
     • Type = string
     • Column label = Confidential data
     • Column name = u_confidential_data
     • Max length = 1,000
   • Save
2. Log into the proxy and create an Edge Encryption Configuration for the new column in (2)
3. Open any record in the incident table and add Confidential data to the Form
4. From the proxy create a new incident using the regular incident form with a value in the "Confidential data" field - this will create fine, verify the encryption by logging into the instance and viewing the new INT, it should show "Confidential data" as encrypted
5. Navigate to https://<proxy_url>/sp?id=form&table=incident&sys_id=-1&view=Default%20view - that should bring up a new incident form in Service Portal - put a value into the "Confidential data" field and try to save it - fails with:
   "Invalid attempt to insert non-encrypted data into field: u_confidential_data in table: incident." 

Select the Save button in the bottom right:

 The error seen when trying to save the form and create the incident:

Procedure

 

1. On the proxy, navigate to System Definition > UI Action > Filter by sysID is sysID.
   
   • In the example above, the sysID is '4df52ee8dba51300123479e49f9619f3'. There should only have one result now. This is a global UI Action for Save.
2. Click on that record, change the table to incident.
   
   • Right click on the toolbar and select Insert and Stay.
     
     • Do not use Save. Insert and Stay creates a new record that does not change the original Save record.
     • Now a UI Action Save record that is tailored for the incident table has been created.
3. In the same place System Definition > UI Action finds the equivalent global UI Action for Submit and repeat step 2
   
   • There are two new UI Actions on the incident table, one for Save and one for Submit
   • Keep the two new sys_ids for these two new records, they are used in the Edge Encryption Rule Condition
4. Create the new Edge Encryption Rule for HTTP Post called IncidentSP - suggested Order is 5000: 

1. Verify the rule works:
   
   • Navigate here: https://<proxy_url>/sp?id=form&table=incident&sys_id=-1&view=Default%20view
   • Enter Confidential data in the form and select Save (Ctrl + s) from the bottom of the form
   • The incident is created and is encrypted if view from normal instance URL, but is decrypted if viewed in the proxy
   • Can also do the creation from the context menu to verify that Save and Submit both work 

Applicable Versions

All versions