[midPoint] Conditional Synchronization - Getting MidPoint account attributes

[mariano marron]

Hi everyone! The issue I have is the following.

I have accounts in a resource that I want to link to existing users in
MidPoint based on a condition: if the user in MidPoint has a certain
"employeeType" value, I want the account in the resource to get linked to
that user. Otherwise, the user shouldn't be linked.
I understand that I can add the following code to the synchronization of
the resource:



















*   <synchronization>      <objectSynchronization>
 <enabled>true</enabled>         <correlation>            <condition>
        <script>                  <code>
basic.getAttributeValue(account, 'name') == "xxxxxxx"
</code>                </script>            </condition>
<q:equal>               <q:path>c:name</q:path>               <expression>
                <c:path>declare namespace
icfs='http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3
<http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3>';
$account/attributes/icfs:name</c:path>               </expression>
  </q:equal>         </correlation>*

But that "name" attribute, refeers to the name of the account in the
resource, not the one in MidPoint. Is there anyway I can refeer to the
MidPoint account and get the "employeeType" values to compare them to a
certain value, instead of using the resource account attributes for the
condition?

Thanks a lot!

Mariano
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20160929/07b7f6ff/attachment.htm>