[Midpoint-dev] midPoint-dev Digest, Vol 52, Issue 1

[Mani Pasarla]

Hi ,

May I know if anyone has any suggestion on the below query?

1. Midpoint - Entitlement Level Request Access


Regards,

Manikanta



________________________________
From: midPoint-dev <midpoint-dev-bounces at lists.evolveum.com> on behalf of midpoint-dev-request at lists.evolveum.com <midpoint-dev-request at lists.evolveum.com>
Sent: Monday, May 5, 2025 6:00 PM
To: midpoint-dev at lists.evolveum.com <midpoint-dev at lists.evolveum.com>
Subject: midPoint-dev Digest, Vol 52, Issue 1

Send midPoint-dev mailing list submissions to
        midpoint-dev at lists.evolveum.com

To subscribe or unsubscribe via the World Wide Web, visit
        https://lists.evolveum.com/mailman/listinfo/midpoint-dev
or, via email, send a message with subject or body 'help' to
        midpoint-dev-request at lists.evolveum.com

You can reach the person managing the list at
        midpoint-dev-owner at lists.evolveum.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of midPoint-dev digest..."


Today's Topics:

   1. Midpoint - Entitlement Level Request Access (Mani Pasarla)


----------------------------------------------------------------------

Message: 1
Date: Mon, 5 May 2025 03:59:54 +0000
From: Mani Pasarla <mani.pasarla at h-kare.com>
To: "midpoint-dev at lists.evolveum.com"
        <midpoint-dev at lists.evolveum.com>, "midpoint at lists.evolveum.com"
        <midpoint at lists.evolveum.com>
Subject: [Midpoint-dev] Midpoint - Entitlement Level Request Access
Message-ID:
        <PN3P287MB03214D5D7D51EA66746314DDB48D2 at PN3P287MB0321.INDP287.PROD.OUTLOOK.COM>

Content-Type: text/plain; charset="windows-1252"

Hi ,

Can you please help to confirm on the following questions?

Midpoint Version: 4.9.2
AD Connector Version: 3.9.1


  1.
Requesting at Entitlement level instead of the role - Is this approach recommended in MidPoint? Compared to other IGA solutions, which typically support entitlement-level access requests out of the box. Does MidPoint require additional configuration to achieve similar functionality?. Is there a way to enable entitlement-level access requests in MidPoint?
  2.
We've explored using Application Roles as an alternative to direct Entitlement Access Requests, where relevant entitlements are grouped under a role. Is this considered a recommended approach over requesting individual entitlements?
Additionally, we're facing an issue with our Active Directory application?we're unable to add entitlements to an Application Role. When attempting to add them as inducements, the option to select entitlements doesn't appear. Could you provide any references or suggestions to help resolve this?


Regards,

Manikanta


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint-dev/attachments/20250505/38f00523/attachment-0001.htm>

------------------------------

Subject: Digest Footer

_______________________________________________
midPoint-dev mailing list
midPoint-dev at lists.evolveum.com
https://lists.evolveum.com/mailman/listinfo/midpoint-dev


------------------------------

End of midPoint-dev Digest, Vol 52, Issue 1
*******************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint-dev/attachments/20250514/48060ba4/attachment.htm>