FootPrints Service Core

FootPrints Security and Interface ERD

FP12 Security and Interface ERD

Applies to FootPrints 12 and above.

FootPrints Service Core

Vote History

In FootPrints 12 (or later), individual votes are recorded in the History, where they can be difficult to see. The attached VoteHistory script can be added to the On Vote business rule to record the vote results in a custom field. Generally, this custom field will be a Textarea or Rich Text field with journal enabled.

Attachment: VoteHistory

Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 International License.

FootPrints Service Core

Two Click Ballots in FootPrints 12

In this post I describe how to configure two-click approvals or rejections in FootPrints 12. For the end-user approver, the two clicks consist of:

  1. One click on the ballot in order to generate an email
  2. One click on the email send button

This post will focus most specifically on the steps needed to generate the two-click links, and assumes a general familiarity with FootPrints 12 administration, the Email Templates functionality, and with configuring approval processes in a Workflow Process.



As a workspace container administrator, open the container in the Administration console, and select the Email Templates tab. Create a new template, or editing your existing ballot template.

If you are creating a new template, enter the Name of the template and select the Item Type that will use this template.

Approval Link

Now we want add an image file on which we will link approval actions. On the toolbar select the Image button.


FootPrints 12 will present an image properties panel.


On the (default) Upload tab select Choose File, choose the appropriate image file from your computer (you may download and use the images below), and select Send it to the Server. The Image Info tab will be automatically selected. Now select the Link tab and enter the following text in the URL field. Ticket= [TICKET_NUMBER] ItemType= [ITEM TYPE ID] WS= [WORKSPACE ID]&body=Vote=Approve

You will need to adjust with an inbound email address used by your FootPrints installation.


Click OK when done.

Reject Link

Insert a white space (such as a space character) immediately after the image. Repeat the above steps in order to generate a rejection link, exchanging the URL with the following. Once again, you will need to replace the email address with your own. Ticket= [TICKET_NUMBER] ItemType= [ITEM TYPE ID] WS= [WORKSPACE ID]&body=Vote=Reject

Finishing Up

Your email template may now look something like this:


Now add any verbiage that may be appropriate for your approvers. You can now Save your template and use this template in any approval processes in your Workflow Process. Afterwards make sure you save and publish your configuration.


When the approval process is triggered with an appropriate email notification, your approver will receive an email that may look like this.

Approval_Required__test_ticket_2_Ticket__TKT-1003_ItemType__692_WS__691_-_Inbox_-_gregt_ayearon_com.pngWhen the approver selects the Approve button, a new email will be generated that may look like this.


The approver may now send the email.


I generated these royalty-free images using Graphic for Mac. They may be useful to you.

VoteApprove VoteReject


VoteThumbsUp VoteThumbsDown


Service Desk Starter for FootPrints 12

Ayearon is proud to announce the release of Service Desk Starter v1.0.0.

The Service Desk Starter is a set of FootPrints 12 configuration templates, process diagrams, and a Planbook to help IT departments deploy FootPrints more rapidly across multiple processes:

  1. Incident Management
  2. Service Request Fulfillment
  3. Access Management
  4. Change Management
  5. Problem Management

The Service Desk Starter is released under the Creative Commons Attribution International 4.0 license. You are free to use, mix, and match. You are not obligated to share the any changes you make.

Download link: DEMO Service Desk Starter v1.0.0


Shared Features

  • Process Diagrams in Visio and PDF formats for:
    • Ticket Logging
    • Incident Management
    • Request Fulfillment
    • Access Management
    • Change Management
    • Problem Management
  • Planbook with details of configurations
  • Record Definitions for:
    • Change
    • Problem
    • Survey
    • Task
    • Ticket
  • Relationships for:
    • Global and Master Tickets
    • Ticket to Problem
    • Ticket to Change and Problem to Change
  • Shared Fields
    • Contact Information
    • Incident Prioritization
    • Incident, Problem and Change Categorization
  • Email Templates
    • Non-default email templates for Ticket registration and update for contacts, assignees, and CC’s
    • Approval ballots for Change Management approvers to approve via email
  • Saved searches for common use cases


  • Requester linking
  • Workflows for Normal, Emergency, and Standard Changes
  • Normal approval workflows for Manager, CAB, and Requester UAT
  • Emergency approval workflows
  • Categorization dependency mapping
  • Fields for Change Description, Business Justification, and Risk Analysis
  • Integration with Tickets (Incidents and Service Requests) and Problems


  • Standard Workflow Process encompassing all Problems
  • Approval workflow for recommendation acceptance
  • Categorization dependency mapping
  • Tracking of Problem Description, Cost Benefit Analysis, Root Cause Analysis, Workaround, and Solution
  • Integration with Incident and Change


  • Sample Survey field and form configuration
  • Integration with Ticket


  • Integration with Tickets
  • Support for sequencing and integrated sorting with Master Ticket


  • Workflows for Incidents and Requests (Service and Access)
  • Categorization dependency mapping
  • Automatic classification of Ticket Type and Request Type
  • Priority mapping from Impact and Urgency
  • Tracking of multiple requesters
  • Customer support for requester tracking
  • Ticket acknowledge functionality for reassignment and Status update
  • Separate email notifications on submission and update for Requester, Assignee, and CC


I have added some of the most popular content to the Links section, in the right-hand side of the page.


Planbook for FootPrints 12 v1.3

Ayearon Inc is proud to announce the latest update of its Planbook for FootPrints 12 v1.3 under the Creative Commons Attribution 4.0 International (CC BY 4.0) license (summary and full license).

The Planbook is the product of years of experience helping customers plan, implement, and improve services and processes using automated workflow tools. The Planbook is designed for the following uses, related to the BMC FootPrints 12 software:

  1. Plan for a new implementation.
  2. Configuration and customization of the software.
  3. Track status of the implementation.
  4. Document the configuration and customization of the product in production.

The Planbook is available here: Planbook for FP12 v1.3

FootPrints Service Core

Manager Approvals in FootPrints 12

One of the most critical of features in v11 missing from v12 is manager approvals. Fortunately, there is a workaround in Microsoft SQL Server that is sufficient for most Windows Active Directory environments.

This post will document how to implement this workaround. Later we will explore some of the limitations of the workaround. The implementation requires three major steps, each of which are described below.

  1. Link an ADSI server to the FootPrints database server.
  2. Create a view of the LDAP server in the FootPrints database.
  3. Configure the FootPrints Address Book to use the new database view.

When complete, FootPrints 12 address book queries will be made against LDAP via the ADSI connector in SQL Server, which will also provide the Manager’s login ID in a format (sAMAccountName) that is usable to the FootPrints 12 approval engine.

Link the ADSI Server

The blog post How to: Use SQL Server to query Active Directory describes how to perform this step, with a modification. For brevity we will not repeat the details in that post. You will perform these configurations in the database server used by FootPrints 12.

Before attempting this process, you will need a service account in AD whose login ID and password are known to you. Please do not use your own login because that password will probably be changed every 60-90 days. Administrator privileges are not required for this function.

In the Security tab, in the options under “For the login not defined in the list above, connections will:” if you use the choice “Be made using login’s current security context” as per the article, FootPrints will display error messages during contact searches because the Apache Tomcat service used by FootPrints does not have an appropriate security context.

Please choose instead “Be made using this security context” and enter the domain, login ID, and password for the AD service account.

Below is a summary of the settings that will be used in the Linked Server.

Linked server: ADSI
Server type: Other data source
Provider: OLE DB Provider for Microsoft Directory Services
Product name: Active Directory Services 2.5
Data source: adsdatasource
Provider string: ADSDSOObject
ADSI Linked Server General properties
ADSI Linked Server Security properties

Create a Database View

In the FootPrints database, generally fpscdb001, you will create a new view. You can paste the following query into the new view. Please note that the LDAP server name and domain names will need to be tailored to your environment. This view includes commonly used fields but additional fields may be required for your environment.

This query / view assumes the primary key of the address book is sAMAccountName (User ID). If you are using another field, such as email address, you will need to make appropriate changes to the upper select and join parameters.

SELECT usr.sAMAccountName, usr.givenName,, usr.department, usr.mail, usr.displayName, usr.title, usr.telephoneNumber, usr.physicalDeliveryOfficeName, mgr.sAMAccountName as ManagerId, manager
(ADSI, 'SELECT manager, distinguishedName, mail, sAMAccountName, displayName, sn, givenName, userPrincipalName, department, title, telephoneNumber, physicalDeliveryOfficeName
FROM ''LDAP://,DC=com''
WHERE objectClass = ''Person'' AND displayName = ''*'' ') as usr
(ADSI, 'SELECT distinguishedName, sAMAccountName
FROM ''LDAP://,DC=com''
WHERE objectClass = ''Person'' AND directReports = ''*'' ') as mgr
ON usr.manager = mgr.distinguishedName

You can now save the new view. When you do save the view, SQL Server Management Studio will ask you for the name of the view. You should provide a descriptive name such as v_AddressBook_LDAP.

An Example

Below is an example where I broke the view queries into 2 views: v_ADSI_Managers and v_ADSI_Users. The Users view will be used in the Address Book configuration (below) and depends on the Managers view.


SELECT samAccountName, userPrincipalName, givenName, sn, displayName, mail, distinguishedName
'SELECT manager, distinguishedName, mail, samAccountName, displayName, sn, givenName, userPrincipalName
FROM ''LDAP://fp12/DC=footprints12,DC=local''
WHERE objectClass = ''Person'' AND displayName = ''*'' AND directReports = ''*''
AS managers


SELECT usr.sAMAccountName, usr.givenName,, usr.department, usr.mail, usr.displayName, usr.title, usr.telephoneNumber, usr.physicalDeliveryOfficeName, usr.manager, 
mgr.samAccountName AS managerid
'SELECT manager, distinguishedName, mail, sAMAccountName, displayName, sn, givenName, userPrincipalName, department, title, telephoneNumber, physicalDeliveryOfficeName
FROM ''LDAP://fp12/DC=footprints12,DC=local''
WHERE objectClass = ''Person'' AND displayName = ''*'' ')
dbo.v_ADSI_Managers AS mgr ON usr.manager = mgr.distinguishedName

Configure the Address Book

After confirming in Microsoft SQL Server Management Studio that your view runs successfully, you can now configure your Address Book to use a Dynamic SQL source. For this you will require System Administrator access to FootPrints and a mixed-mode account in SQL Server.

  1. Log in to FootPrints 12 as a System Administrator
  2. Open the Administration console
  3. In the Address Book container on the Main page of the Administration console, select Manage
  4. Edit the appropriate Address Book. Generally, this is the address book that is linked to one or more Workspace container(s).
  5. Edit the contact item named Contact
  6. In the navigation bar on the left, select Fields.
    1. Create a new field with the following values:
      1. Singular Name: Field Manager ID
      2. Field Type: Simple Text
      3. Permission: Optional
    2. Save
    3. In the bread crumb trail, navigate up one level to the Item:Contact
  7. In the navigation bar on the left, select Forms.
    1. Add the new Manager ID field to the Agent Web form
    2. Save the form
    3. In the bread crumb trail, navigate up one level to the Item:Contact
  8. In the navigation bar on the left, select Address Book Options
  9. Select the Dynamic SQL radio button and then Configure External Source. You will be taken to the configuration screen like the one below.
  10. Enter values for:
    1. Server Address: The name or FQDN of the SQL Server that stores the fpscdb001 database
    2. Server Port: 1433 (default value, unless it was changed by your DBA)
    3. Database Type: Sql Server
    4. Database: fpscdb001
    5. Server User ID: User ID for the mixed-mode account in SQL Server
    6. Server Password: Obtained from your DBA
  11. Click Connect
  12. In Table or View select the view you created earlier (for example dbo.v_AddressBook_LDAP)
  13. For each field under FootPrints Address Book, select the corresponding attribute. The attributes were chosen when you created the view.
  14. Click Save
  15. In the bread crumb trail navigate to the top level of the container
  16. Select Save and Publish
Address Book Dynamic SQL configuration panel

Configure the Workspace Item

Having configured the Address Book with a field Manager ID that maps to the ManagerID attribute in the v_AddressBook_LDAP view, you will now need to configure an identically named field, Manager ID, in the workspace-type record definition, and link the field to the Link Control.

  1. Repeat “Configure the Address Book” steps 1 through 7.1 for the Workspace record definition that requires the approval manager configuration.
  2. On the Agent Web form select the Ticket/Contact link control (see below).
  3. In the Control Properties (left) select the Configure button (see below)
    1. Select Linked Fields
    2. Under Available Fields select the new Manager ID field
    3. Select the right arrow to move the field to Selected Fields
    4. Select Save
Agent Web form link control
Link Control Configuration

In the Workflow Process you can now configure an approval state to use the Manager ID as a dynamic approver.

  1. Navigate to Workflow Processes
  2. Edit the appropriate workflow process
  3. Select the appropriate Approval State
  4. Under Approvers select Add/Remove
  5. Under the Dynamic tab select the Manager ID field
  6. Select Assign Approvers


The performance of address book searches using this method appears to be equivalent to queries directly against LDAP. However, there are a few caveats and limitations.

  1. The method does not support approvals by all managers of all linked contacts. Only the most recently linked contact is supported, because the most recently linked contact is the one that populated the Manager ID field in the workspace record.
  2. The Manager ID field must at least be on the agent form and be editable at least by the agent. There is currently no way for this field to be read-only.
  3. By default this method supports only 1,000 records in the query. If the query to Active Directory returns more than 1,000 records, it will be truncated. There may be a method to override this in Active Directory, however.
  4. The query above is restricted to a single OU search in Active Directory. The UNION query command will be required to to perform simultaneous searches against multiple organizational units.
FootPrints Service Core

Success w/ FootPrints 12

One of my customers has gone live recently, and I am working on another at the moment. The feedback is generally positive, with most people preferring the user interface to FP11. In the course of these implementation, I have probably found every bug in the product.

As a result I have earned a few scars and have learned several lessons that will help.

  • Publish early, publish often.
  • Save, save, save.
  • Test, test, test: create tickets, edit tickets, etc. Use a browser and login ID separate from the administration console.
  • Export your configurations frequently: several times per day during active development; once before and after periodic updates.
  • Be very deliberate about what you are doing and how you did it. Try to perform administration operations the same way once you discover a “groove” that works.
  • Repeat all the above when touching the process workflows. These are especially fragile.
  • Keep a test environment separate from production. If you are just learning and testing, don’t do it in the environment that is (or will become) production. You can usually build it in production much faster the second time.
  • If you experience a bug, and you can do so repeatedly, document and submit it to support. I didn’t realize before that product management wasn’t aware of many bugs that I had deemed too obvious to report.

Most importantly I recommend patience, healthy amounts of focus and determination, and some tolerance for the unexpected.


The Future

In my experiences with BMC product management and support teams, they are very responsive to feedback and very actively working to improve the product. They have “turned the corner” on the real-world issues we are facing and are observing us closely. I am very encouraged with the product overall and with the pace at which bugs are now being addressed.

In addition the support and development teams are prioritizing showstoppers that prevent you from going live in the near future. If you are almost complete and ready to cut over into production, you can get fairly fast turnaround time from support the escalation teams should any late bugs arise.

The FootPrints 12 platform is now “ready for prime time” but not yet for all existing customers of FP11. The difference is in the maturity and rigidity of the process. Organizations who need predictability and adherence to existing process should stay on FootPrints 11 until the 12 platform matures a bit longer.

FootPrints Service Core

Who Uses Ayearon?

My name is Greggory Tucker. Ayearon Inc is the legal vehicle through which I do contracting for BMC FootPrints Service Core v11 and v121.

In this post I want to explain briefly who are my customers and partners.

  • Companies who have recently purchased BMC FootPrints Service Core and BMC Client Manager (BCM, formerly Asset Core). I can deliver flexible, cost-effective solutions for new implementations.
  • Companies who have existing implementations who need day-to-day Workspace maintenance, improvements or changes in advanced workflow, new workflow or processes, and product upgrades. I also work with full or part-time FootPrints administrators to augment services and provide training.
  • BMC Partners to augment resourcing and capabilities for their customers.
  • Non-partner consulting organizations who have targeted opportunities at the companies described above.
  • Organizations in North America. Ayearon, Inc is an S-type corporation registered in Nevada, USA. All services are quoted and invoiced in US Dollars.

Contact me at if you feel I can help you or one of your customers.

1Ayearon Inc is not an official partner of BMC Software. All products are the copyright and trademark of BMC Software.

FootPrints Service Core

The Themes of the FP12

In FootPrints Service Core 12 BMC introduced several new themes, in addition to modernizing the user interface and improving performance.

Here are some samples of a demo Service Catalog (Category Browser) using each theme.

For now I am sticking with Dark. Which one do you like?