[midPoint] User activation by HR data with manual override possibility

[Aivo Kuhlberg]

Hi,

I want to implement midPoint user activation mechanism based on HR resource user account field value with manual GUI override possibility. When the HR resource field "status" has value "WRS" (work relationship stopped) then the midPoint user should be disabled, otherwise user should be enabled. However, I need also possibility to manually override current midPoint user activation value.
I tried implemented inbound activation for HR resource (like https://github.com/Evolveum/midpoint/blob/master/samples/demo/hr.xml) and it works - When I set HR user status to value "WRS" then midPoint user's administrative status is changed to state Disabled. I can also manually enable disabled user if needed in administration GUI. But the problem here is that both HR resource and admin gui have the same access to user's administrativeStatus value - I can change the user status in GUI but whenever the HR user data is changed then it changes also administrativeStatus back to value depanding on status field. Any ideas, how should I implement disabling/enabling of user based on HR data with manual user activation override possibility?
Thanks,
Aivo Kuhlberg

________________________________
Käesolev e-kiri võib sisaldada asutusesiseseks kasutamiseks tunnistatud teavet.
This e-mail may contain information which is classified for official use.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170116/ef55ff79/attachment.htm>