[midPoint] Protected group versus tolerance

[Aivo Kuhlberg]

I just noticed that user membership of protected AD group was changed - one linked user was removed from the protected group as in midpoint that user does not have assignment to that group. I have set in schemaHandling account association section <tolerant>true</tolerant>. So does it mean that non-tolerant option is able to change protected groups? I use .NET AD/Exhange connector.
Thanks,
Aivo Kuhlberg

________________________________
Käesolev e-kiri võib sisaldada asutusesiseseks kasutamiseks tunnistatud teavet.
This e-mail may contain information which is classified for official use.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20161109/fc2a2b24/attachment.htm>