[midPoint] Create different attributes to different UserTypes

[Davy Priem]

Hi,

Users of type “Clients” and “Partners" can be accomplished  by using archetypes. You can’t bind a specific UserType schema extension to a specific ‘archetype’ (yet). From documentation (https://docs.evolveum.com/midpoint/features/planned/archetypes/):

Archetype Schema

MidPoint supports custom schema extension<https://docs.evolveum.com/midpoint/reference/schema/custom-schema-extension/> functionality for a long time. The limitation is that this schema is bound to the static types, such as UserType or RoleType. It cannot be applied to archetypes directly. The workaround was to hide extra extension properties by using object template. As object template can be archetype-specific, this works. But it is quite difficult to maintain: adding new extension property for an archetype means hiding this property in all other archetypes.

Therefore it would be much better if each archetype can define its own schema extension. And this is feasible to implement, but it is not necessarily easy. The current "dogma" in midPoint is that the schema is known completely at midPoint start time (hence the need to a restart when extension schema is changed). This can be changed, but it means dealing with fundamental layer that underlines midPoint (Prism schema<https://docs.evolveum.com/midpoint/devel/prism/schema/>). But we will get to that eventually. But as this is not an easy task, therefore it won’t be anytime soon unless there is a platform subscriber<https://docs.evolveum.com/support/subscription-sponsoring/> asking for it.

Davy Priem


Op 23 jul. 2021, om 16:24 heeft Douglas Alves via midPoint <midpoint at lists.evolveum.com<mailto:midpoint at lists.evolveum.com>> het volgende geschreven:

Hello guys,

I'm newbie in IAM, and  also Midpoint, I watched some tutorials in Youtube about Midpoint specially one that extends a Administrator schema adding the attribute "hat" to user form. My question is  how create two types of users "Clients" and "Partners" , each of users have different set of attributes.
We tried to use different schemas.xsd that extends from UserType  but in that case we won't able to separate the attributes from partners and clients.
Apreciate your help.

Kind Regards,
Douglas Alves.
_______________________________________________
midPoint mailing list
midPoint at lists.evolveum.com<mailto:midPoint at lists.evolveum.com>
https://lists.evolveum.com/mailman/listinfo/midpoint

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20210723/960fe617/attachment.htm>