[midPoint] Accessing user extension attribute from different focus type.

Ivan Noris Ivan.Noris at evolveum.com
Thu Sep 11 09:50:38 CEST 2014


Hi Deepak,

to understand you question - you are creating groups for each user... ? Or why you need user attributes for creating groups?

Regards,

-- 
  Ing. Ivan Noris
  Senior Identity Management Engineer
  evolveum.com
  ___________________________________________
           "Idem per idem - semper idem Vix."

----- Original Message -----
> From: "Deepak Natarajan" <dnataraj at trilobytesystems.com>
> To: "midPoint General Discussion" <midpoint at lists.evolveum.com>
> Sent: Thursday, September 11, 2014 9:28:54 AM
> Subject: [midPoint] Accessing user extension attribute from different focus	type.
> 
> 
> Hi everyone -
> 
> Is it possible to access a user extension attribute, if the focusType is
> OrgType or RoleType for example?
> 
> So, would this work :
> 
>             <objectType>
>                 <kind>entitlement</kind>
>                 <intent>ldapGroup</intent>
>                 <displayName>LDAP Group</displayName>
>                 <objectClass>ri:GroupObjectClass</objectClass>
> 
>                  ...
>                 ...
>                 <attribute>
>                     <ref>ri:description</ref>
>                     <matchingRule>mr:stringIgnoreCase</matchingRule>
>                     <outbound>
>                         <strength>weak</strength>
>                         <source>
>                             <path>$focus/name</path>
>                         </source>
>                         <source>
>                             <name>uid</name>
>                             <path>$user/extension/apos:originUID</path>
>                         </source>
>                         <source>
>                             <name>groupType</name>
>                             <path>$focus/extension/apos:groupType</path>
>                         </source>
>                         <expression>
>                             <script>
>                                 <code>
>                                            ....
>                                 </code>
>                             </script>
>                         </expression>
>                     </outbound>
>                 </attribute>
> 
> 
> So when I'm provisioning groups, I need access to a user attribute that
> I've defined in my schema extension. Will $user/... work? For some
> reason, I'm getting an null value returned...
> 
> Thanks!
> 
> BR/
> --
> Deepak Natarajan
> 
> 
> 
> 
> 
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
> 



More information about the midPoint mailing list