[midPoint] Disable all user accounts (projections) except one.

[Ivan Noris]

Hi Wojciech,

interesting request. I would probably introduce a new user attribute
(extension) or a new value of some existing user attribute which would
indicate the need to not-disable the account, and then use this
attribute in activation/administrativeStatus mapping...

Ivan


On 21.09.2018 15:31, Wojciech Staszewski wrote:
> Hello!
>
> Today I was asked to immediate disable an user with a little exception
> - one specified account on some resource should stay enabled.
> I was thinking how to do it with midPoint.
> - disable user - it disables all his accounts.
> - disable user and manually enable one projection works - until next
> reconciliation.
>
> How to properly handle such cases? Should I add a protected account in
> the resource configuration? Hmm....
>
> Best regards,
> Wojciech Staszewski
> Network Systems Administrator
> Diagnostyka Sp. z o. o.
> http://www.diagnostyka.pl
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint

-- 
Ivan Noris
Senior Identity Engineer
evolveum.com