[midPoint] Role assignment from db table

Justin Stanczak rizenine at gmail.com
Tue Apr 9 18:35:34 CEST 2019


Here's my defaultUserTemplateRef configuration. Is this what's causing
my problems?

*In SystemConfiguration:*

    <defaultUserTemplateRef xmlns:tns="
http://midpoint.evolveum.com/xml/ns/public/common/common-3"
oid="0488d68b-c064-417e-b5fa-db9b723fb546" relation="org:default"
type="tns:ObjectTemplateType">
        <!-- User Template -->
    </defaultUserTemplateRef>


*defaultUserTemplateRef: *

<objectTemplate xmlns="
http://midpoint.evolveum.com/xml/ns/public/common/common-3" xmlns:c="
http://midpoint.evolveum.com/xml/ns/public/common/common-3" xmlns:icfs="
http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3"
xmlns:org="http://midpoint.evolveum.com/xml/ns/public/common/org-3"
xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3" xmlns:ri="
http://midpoint.evolveum.com/xml/ns/public/resource/instance-3" xmlns:t="
http://prism.evolveum.com/xml/ns/public/types-3"
oid="0488d68b-c064-417e-b5fa-db9b723fb546" version="8">
    <name>User Template</name>
    <metadata>
        <createTimestamp>2019-02-28T08:19:25.128-05:00</createTimestamp>
        <creatorRef oid="00000000-0000-0000-0000-000000000002"
relation="org:default" type="c:UserType">
            <!-- administrator -->
        </creatorRef>
        <createChannel>
http://midpoint.evolveum.com/xml/ns/public/model/channels-3#objectImport
</createChannel>
    </metadata>
    <mapping id="1">
        <strength>strong</strength>
        <source>
            <c:path>$user/givenName</c:path>
        </source>
        <source>
            <c:path>$user/familyName</c:path>
        </source>
        <expression>
            <script xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="c:ScriptExpressionEvaluatorType">
                <code>
givenName + ' ' + familyName
</code>
            </script>
        </expression>
        <target>
            <c:path>$user/fullName</c:path>
        </target>
        <condition>
            <script xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="c:ScriptExpressionEvaluatorType">
                <code>givenName != null && familyName != null</code>
            </script>
        </condition>
    </mapping>
    <mapping id="2">
        <name>end user role</name>
        <strength>strong</strength>
        <expression>
            <assignmentTargetSearch xmlns:xsi="
http://www.w3.org/2001/XMLSchema-instance"
xsi:type="c:AssignmentTargetSearchExpressionEvaluatorType">
                <targetType>c:RoleType</targetType>
                <oid>9a355bd4-07b3-44e5-8708-caa43e94c2b6</oid>
            </assignmentTargetSearch>
        </expression>
        <target>
            <c:path>assignment</c:path>
        </target>
    </mapping>
</objectTemplate>


On Tue, Apr 9, 2019 at 11:34 AM Justin Stanczak <rizenine at gmail.com> wrote:

I do have a user template that assigns a default role in the system
configuration global, but that's not related to this.

>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20190409/2a9452ed/attachment.htm>


More information about the midPoint mailing list