[midPoint] Roles managing groups in Active Directory

[Gus Lou]

Hi Al Lilianstrom

Did you use the metarole concept in your settings?

I achieved the goal mentioned by you, using the approach of the link below:

https://evolveum.com/simplifying-ldap-group-management-using-midpoint/

Regards

Gus

Em qui., 10 de dez. de 2020 às 11:45, Al Lilianstrom via midPoint <
midpoint at lists.evolveum.com> escreveu:

> Still exploring midPoint.
>
> I've been able to create a role and map it to an existing AD group. I've
> also been able to add a role and have it create the AD group in the OU I
> wanted it.
>
> What I've not been able to do is
>
> 1) have existing members of the group show up as having the role in
> midPoint
> 2) Add the role to a user in midPoint and have the users AD account added
> to the group
>
> I've been going through the wiki articles on AD groups and I just seem to
> be missing something.
>
> Any suggestions?
>
>   al
>
> --
> Al Lilianstrom
> Authentication Services
>
> Fermi National Accelerator Laboratory
> www.fnal.gov
> lilstrom at fnal.gov
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> https://lists.evolveum.com/mailman/listinfo/midpoint
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20201210/3a41d4bd/attachment.htm>