[midPoint] Mapping Org to Active Directory Groups

[Ian Chen]

Hi List,

I'm new here are trying to solve mapping Org to AD groups as
https://evolveum.com/blog/practical-organization-structure-in-active-directory/.
I'm stuck at setting member for group.

It seems AD group can only have member (children), while in midpoint Org is
assigned upwards (parent). As I cannot find children Org in outbound
mapping, I added an extension attribute to hold parentID of parent Org. My
plan is when outbound mapping, searching for any Org with parentID set to
current Org ID, but I cannot find how. Please help!

Also if there is better/simpler method to do this, please let me know.

Thanks!
Ian
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20171025/77fe9c22/attachment.htm>