[midPoint] securityPolicy mapping in Org

[Loïc Schamber]

Hi,

I didn’t try to assign a security policy directly in object template but I achieved a similar behaviour using the following process:

  *   Create a role with security policy as inducement
  *   Assign this role to all org using object template with the following mapping

<mapping>
<name>Role mapping</name>
<strength>strong</strength>
<expression>
                                 <assignmentTargetSearch>
                                                  <targetType>RoleType</targetType>
                                                  <filter>
                                                                  <q:equal>
                                                                                   <q:path>name</q:path>
                                                                                   <q:value>role_name</q:value>
                </q:equal>
                </filter>
            </assignmentTargetSearch>
                 </expression>
                <target>
<c:path>assignment</c:path>
</target>
</mapping>

I hope it will help you,

Best regards,

Loïc Schamber  | Junior IT Consultant

[logo]<https://www.serial.ch/>

lschamber at serial.ch<mailto:lschamber at serial.ch> |  +41 22 555 27 69<tel:+41%2022%20555%2027%2069>
Chemin du Pré-Fleuri 5 – CH 1228 Plan-les-Ouates
[LinkedIn]<https://www.linkedin.com/company/redcactus-by-positivethinkingcompany>  [Instagram] <https://www.instagram.com/positivethinkingcompany>
Redcactus by SERIAL www.serial.ch<www.serial.ch>
www.positivethinking.co

________________________________
Help save paper, do you really need to print this email?
The content of this email and any attachments are confidential and are intended solely for the person and/or company to whom they are addressed. The information may also be legally privileged. No employee or agent is authorized to conclude any binding agreement on behalf of SERIAL with another party by email without express written confirmation. If you have received this email in error, any use, reproduction or dissemination of this transmission is strictly prohibited. If you are not the intended recipient, please immediately notify the sender by return E-mail and delete this message, its attachments and all copies from your system. Internet communications cannot be guaranteed to be timely, secure, error or virus-free. The sender does not accept liability for any errors or omissions. Thank you for your cooperation.

From: midPoint <midpoint-bounces at lists.evolveum.com> On Behalf Of Vladislavs Filipciks
Sent: mercredi, 27 mai 2020 14:00
To: midpoint <midpoint at lists.evolveum.com>
Subject: [midPoint] securityPolicy mapping in Org

Hello.

Does any one know, is it possible to assign security policy to Organization using mapping in Org Object Template?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20200527/e4086a31/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 6827 bytes
Desc: image001.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20200527/e4086a31/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 451 bytes
Desc: image002.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20200527/e4086a31/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 1129 bytes
Desc: image003.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20200527/e4086a31/attachment-0002.png>