[midPoint] Manual connector questions

[Radovan Semancik]

Hi,

Manual connectors are quite an interesting functionality of midPoint. 
However, it was created in small parts. It was never a completely funded 
work. As mostly unfunded work we have focused on the code. The code is 
solid, and in fact it recently went over a significant consolidation and 
cleanup as part of Galileo development. However, the documentation 
leaves much to be desired. We have made significant investment to manual 
connector functionality during last few years. And unfortunately, we do 
not have any more resources to invest even more funds in the documentation.

Therefore I can only recommend the options that I'm recommending all the 
time (with a little twist):

1) Get midPoint subscription. Ideally platform subscription. Income from 
the subscription can be used to improve documentation.

2) Sponsor the work on midPoint book:
https://evolveum.com/midpoint/midpoint-guide-about-practical-identity-management/
The book was praised by many people. However, Evolveum has been the only 
sponsor of this effort so far. It was quite an effort already. But there 
is still too many things to write down. And the book is not going to 
write itself. I can do it. In fact, I would absolutely love to do it. 
But further work on the book needs funding.

3) Source code is available. You can read through the code and 
contribute the documentation.

I know that this answer does not help much. But asking questions without 
contributing anything back is not going to help the project either.

-- 
Radovan Semancik
Software Architect
evolveum.com



On 09/04/2018 04:16 AM, Alexandre Zia wrote:
> Hi all,
>
>    I'm Having a hard time trying to understand how manual connector 
> actually works.
>    I've tried several approaches, but always end up with some
>  "collateral effects"
>    I've read all I could find about manual resources, MP Confluence, 
> mailing list,
>    provisioned all the examples, tried several different configs, but 
> the fact
>    is that there is no comprehensive explanation on how manual 
> resources works
>    So I'm asking for help here at least to check if I'm doing 
> something terrible wrong
>
> 1. Pure manual connector:
>
>    - Created Role to induce account creation works fine,
>
>    - Upon role assignment the resulting operation it creates a shadow 
> for the
>    account in the connector, however the assignment operation never 
> completes,
>    stays in IN_PROGRESS forever and the shadows keeps 
> pendingOperations and
>    there is no way to get rid of them.
>
>    - Upon role unassignment the role is unassigned but the projection 
> in the
>    resource (shadow) is not removed, stays there forever until we 
> manually
>    delete the shadow and run a reconciliation
>
> 2. Semi manual with CSV connector as additionalConnector:
>
>    - Same as above, except:
>
>       -  I can see the accounts appearing in resource
>          (Accounts tab in resource, searching in the resource side)
>          when the accounts appears in the CSV, but seems to do nothing
>          regarding the shadow.
>
>       - when unassigning the role, same thing, when the account 
> vanishes from CSV
>         nothing happens to the shadow and the projection remains
>
> I have also created a Shadow Refresh Task, and it even reports that is 
> processing the shadows, but nothing changes actually.
>
>   Other thing we are trying to do here is how to notify operator when 
> he needs
>   to manually create or delete the accounts?
>   We have created an extra approval named something like: "Wait for the
>   operator to create the account" but again there is room for 
> improvement here:
>     - We have approvers assigned to the role and an approval stage
>     - So we have added operators as "owners" and filtering the "wait 
> for the
>     operator" approval by the "owner" but this is not working properly.
>
>   Can someone share a bit about the subject?
>   What is the best approach to work with manual connectors?
>
>   If we setup an ITSM plugin (we use Jira here) will it work as expected?
>   By expected I mean will the assignments and unassignments work properly?
>   The projections will be deleted upon unassignments?
>   ITSM plugin is the right way to notify operators?
>
>
>  Thanks for reading the entire email, I know it's huge ;)
>
>  Regards,
>  Alexandre
>
>
>
>
>
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20180905/fe3511e0/attachment.htm>