[Midpoint-dev] Midpoint - Entitlement Level Request Access

[Mani Pasarla]

Hi ,

Can you please help to confirm on the following questions?

Midpoint Version: 4.9.2
AD Connector Version: 3.9.1


  1.
Requesting at Entitlement level instead of the role - Is this approach recommended in MidPoint? Compared to other IGA solutions, which typically support entitlement-level access requests out of the box. Does MidPoint require additional configuration to achieve similar functionality?. Is there a way to enable entitlement-level access requests in MidPoint?
  2.
We've explored using Application Roles as an alternative to direct Entitlement Access Requests, where relevant entitlements are grouped under a role. Is this considered a recommended approach over requesting individual entitlements?
Additionally, we're facing an issue with our Active Directory application—we're unable to add entitlements to an Application Role. When attempting to add them as inducements, the option to select entitlements doesn't appear. Could you provide any references or suggestions to help resolve this?


Regards,

Manikanta


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint-dev/attachments/20250505/38f00523/attachment.htm>