[midPoint] One-way synchronization of accounts from resources.

Prabhakara Rao Doddapaneni dp_rao at yahoo.com
Wed Feb 22 12:00:22 CET 2017


Thank you, Ivan!  
Removing outbound mappings in schema handling and disabling create, update and delete capabilities in synchronization definition worked the magic.  Now deleting accounts in midpoint are not deleting the accounts in external resources.
Thanks,Prabhakar.


      From: "midpoint-request at lists.evolveum.com" <midpoint-request at lists.evolveum.com>
 To: midpoint at lists.evolveum.com 
 Sent: Wednesday, February 22, 2017 2:46 AM
 Subject: midPoint Digest, Vol 58, Issue 31
   
Send midPoint mailing list submissions to
    midpoint at lists.evolveum.com

To subscribe or unsubscribe via the World Wide Web, visit
    http://lists.evolveum.com/mailman/listinfo/midpoint
or, via email, send a message with subject or body 'help' to
    midpoint-request at lists.evolveum.com

You can reach the person managing the list at
    midpoint-owner at lists.evolveum.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of midPoint digest..."


Today's Topics:

  1. One-way synchronization of accounts from resources.
      (Prabhakara Rao Doddapaneni)
  2. Re: SMS Notification (mceylan)
  3. Re: One-way synchronization of accounts from resources.
      (Ivan Noris)


----------------------------------------------------------------------

Message: 1
Date: Wed, 22 Feb 2017 03:56:49 +0000 (UTC)
From: Prabhakara Rao Doddapaneni <dp_rao at yahoo.com>
To: "midpoint at lists.evolveum.com" <midpoint at lists.evolveum.com>
Subject: [midPoint] One-way synchronization of accounts from
    resources.
Message-ID: <849599932.2242105.1487735809164 at mail.yahoo.com>
Content-Type: text/plain; charset="utf-8"

Hello,
I have external identity stores that i configured to sync with midpoint repository.  I need to configure the synchronization so that only changes in the store to be updated in midpoint but not in reverse.  The changes to the users i make in midpoint should not be carried to the external resource.
As of now when i use the resource configuration examples in github, when i delete a user in midpoint, the relevant account is being deleted in the external store.  I dont want to do that.
Please help by explaining how to configure only inbound synchronization but ignore the outbound synchronization.  I am blocked in my POC because of this.
Thanks,Prabhakar.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.evolveum.com/pipermail/midpoint/attachments/20170222/0562acbc/attachment-0001.html>

------------------------------

Message: 2
Date: Wed, 22 Feb 2017 08:30:27 +0200
From: mceylan <mrveceylan at gmail.com>
To: midPoint General Discussion <midpoint at lists.evolveum.com>
Subject: Re: [midPoint] SMS Notification
Message-ID:
    <CADu1p_hXj1JEkbXm6hu0sDqsZgSbKwWE_Qe=EaAQvmvCjUOiEw at mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

hi, thanks for you answer. I did not succeed when I tried.

systemConfiguration file in add


<notificationConfiguration>
      <sms name="default">
        <gateway>
            <url>
              <script>
                  <code>"http://my-sms-gateway/api/v3/sendsms/plain?number="
+ 01234568745 + "&text=" + deneme</code>
              </script>
            </url>
        </gateway>
      </sms>
  </notificationConfiguration>


working sms method


http://my-sms-gateway/api/v3/sendsms/plain?user=ABC&password=DEF&sender=XXX&SMSText=XXX&GSM=01234568745


Can you help me?


2017-02-17 18:41 GMT+02:00 Jason Everling <jeverling at bshp.edu>:

> We use clickatell as our sms gateway for various applications, including
> midpoint, and it works great. We haven't had any issues with them,
>
> JASON
>
> On Fri, Feb 17, 2017 at 2:57 AM, Oskar Butovič - AMI Praha a.s. <
> oskar.butovic at ami.cz> wrote:
>
>> Hi,
>>
>> you can use standard notification and direct it towards sms gateway
>> instead of email. see: https://wiki.evolveum.com
>> /display/midPoint/Configuring+notifications
>>
>> Best Regards
>>
>> Oskar Butovič
>>
>> 2017-02-17 9:52 GMT+01:00 mceylan <mrveceylan at gmail.com>:
>>
>>> Hi,
>>>
>>> How can I make changes to the accounts of users to provide information
>>> to the user via SMS?
>>>
>>> Can you help me?
>>>
>>> --
>>> Merve CEYLAN
>>>
>>> _______________________________________________
>>> midPoint mailing list
>>> midPoint at lists.evolveum.com
>>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>>
>>>
>>
>>
>> --
>>
>> Oskar Butovič
>> solution architect
>>
>> gsm: [+420] 774 480 101 <+420%20774%20480%20101>
>> e-mail: oskar.butovic at ami.cz
>>
>>
>> AMI Praha a.s.
>> Pláničkova 11
>> 162 00 Praha 6
>> tel.: [+420] 274 783 239 <+420%20274%20783%20239>
>> web: www.ami.cz
>>
>>
>> [image: AMI Praha a.s.]
>>
>> [image: AMI Praha a.s.]
>> <http://www.ami.cz/reseni-a-sluzby/bezpecnost-dat/identity-management>
>>
>> Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za
>> společnost AMI Praha a.s.
>> jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně
>> písemnou formu.
>>
>>
>> _______________________________________________
>> midPoint mailing list
>> midPoint at lists.evolveum.com
>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>
>>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
>
>


-- 
Merve CEYLAN
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.evolveum.com/pipermail/midpoint/attachments/20170222/797a9aec/attachment-0001.html>

------------------------------

Message: 3
Date: Wed, 22 Feb 2017 08:46:36 +0100
From: Ivan Noris <ivan.noris at evolveum.com>
To: midpoint at lists.evolveum.com
Subject: Re: [midPoint] One-way synchronization of accounts from
    resources.
Message-ID: <13bb951d-2ee9-4ae9-38f5-5daec5fd2e74 at evolveum.com>
Content-Type: text/plain; charset="utf-8"

Hi,

if you configure your resource with inbound mappings only (remove all
outbounds), midPoint will not try to push any attribute changes to that
resource.

In addition you can configure capatilibies of the resource to completely
disable create, update and/or delete operations:

...

      </schemaHandling>

                <capabilities
xmlns:cap="http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3">
                        <configured>
                                <cap:create>
                                        <cap:enabled>false</cap:enabled>
                                </cap:create>
                                <cap:update>
                                        <cap:enabled>false</cap:enabled>
                                </cap:update>
                                <cap:delete>
                                        <cap:enabled>false</cap:enabled>
                                </cap:delete>
                        </configured>
                </capabilities>
        <synchronization>
...

See also: https://wiki.evolveum.com/display/midPoint/Resource+Capabilities

Please note that when midPoint user is deleted, midPoint will try to
delete also that account, but as the operation is disabled, it will
never delete it and show warning "Operation not supported". There is an
issue https://jira.evolveum.com/browse/MID-2144 to completely ignore
such operations even in GUI.

Of course with custom connectors/meta connectors (ScriptedSQL for
example) you are able to do the same on the connector side - by not
implementing the DeleteOp operation (or any other). What I describe here
is midPoint configurable way which works for any connector.

Best regards,
Ivan

On 02/22/2017 04:56 AM, Prabhakara Rao Doddapaneni wrote:
> Hello,
>
> I have external identity stores that i configured to sync with
> midpoint repository.  I need to configure the synchronization so that
> only changes in the store to be updated in midpoint but not in
> reverse.  The changes to the users i make in midpoint should not be
> carried to the external resource.
>
> As of now when i use the resource configuration examples in github,
> when i delete a user in midpoint, the relevant account is being
> deleted in the external store.  I dont want to do that.
>
> Please help by explaining how to configure only inbound
> synchronization but ignore the outbound synchronization.  I am blocked
> in my POC because of this.
>
> Thanks,
> Prabhakar.
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint

-- 
Ivan Noris
Senior Identity Engineer
evolveum.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.evolveum.com/pipermail/midpoint/attachments/20170222/9d867e4e/attachment.html>

------------------------------

Subject: Digest Footer

_______________________________________________
midPoint mailing list
midPoint at lists.evolveum.com
http://lists.evolveum.com/mailman/listinfo/midpoint


------------------------------

End of midPoint Digest, Vol 58, Issue 31
****************************************


   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170222/bde83e56/attachment.htm>


More information about the midPoint mailing list