# Flowable 6.4.1 IDM

**URL:** <https://forum.flowable.org/t/flowable-6-4-1-idm/4065>\
**Category:** Flowable Engine\
**Created:** [June 23, 2019, 11:21pm UTC](https://forum.flowable.org/t/flowable-6-4-1-idm/4065 "2019-06-23T23:21:37Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![righthireinc](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/righthireinc/32/770_2.png) [@righthireinc](https://forum.flowable.org/u/righthireinc)\
**Post date:** [June 23, 2019, 11:21pm UTC](https://forum.flowable.org/t/flowable-6-4-1-idm/4065/1 "2019-06-23T23:21:37Z")

</div>

Hi,

In my application, I already have a database model for Users, Roles, and Privileges, with their own intermediary relationship tables in case of many-to-many relationships.

I am wondering how I can leverage these tables with Flowable IDM instead of using the tables created by Flowable so that I can avoid table synchronization through database triggers or another approach. Is this possible and how do I approach solving this issue?

Secondly, in another application we are developing, we are using Okta OpenID Connect as the identity provider (not LDAP) for SSO. Does Flowable support SSO througn OpenId? If not, any plans for this support?

Sunil

---

<div class="post-metadata">

**Author:** ![PHH](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/phh/32/94_2.png) [@PHH](https://forum.flowable.org/u/PHH)\
**Post date:** [June 24, 2019, 7:31am UTC](https://forum.flowable.org/t/flowable-6-4-1-idm/4065/2 "2019-06-24T07:31:43Z")

</div>



---

<div class="post-metadata">

**Author:** ![filiphr](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/filiphr/32/315_2.png) [@filiphr](https://forum.flowable.org/u/filiphr)\
**Post date:** [June 24, 2019, 7:47am UTC](https://forum.flowable.org/t/flowable-6-4-1-idm/4065/3 "2019-06-24T07:47:33Z")

</div>

Hey Sunil,

In order to use a custom Users, Roles and Privileges you would need to provide your own implementation of the [`IdmIdentityService`](https://github.com/flowable/flowable-engine/blob/master/modules/flowable-idm-api/src/main/java/org/flowable/idm/api/IdmIdentityService.java). This is the approach that we are using to support LDAP with the [`LDAPIdentityServiceImpl`](https://github.com/flowable/flowable-engine/blob/master/modules/flowable-ldap/src/main/java/org/flowable/ldap/LDAPIdentityServiceImpl.java).

Regarding the OpenID Connection as an identity provider. Currently there is no support for such login for the Flowable UI applications. However, we are open for such a contribution. There is already some work as part of community PR [#1447](https://github.com/flowable/flowable-engine/pull/1447), but it is still WIP.

Cheers,  
Filip
