[midPoint] SAP Connector indirect ACTIVITYGROUPS contribution

[Emil.Militzer at tk.de]

Hello together,

we encountert a problem in our deployment with indirect ACTIVITYGROUPS in the SAP. We want to be non tolerant in the SAP ACTIVITYGROUPS Mapping.
In the SAP itself we also have a complicted role hierarchy. The indirect roles will be calculated in the SAP after we assign a SAP ACTIVITYGROUP with child ACTIVITYGROUPs.
During the next recompute midPoint tries to delete all indirect roles because we are not tolerant. This will have no effect in SAP but will be tried during every recompute.

We tried to work around the issue by importing every indirect role into midpoint but now every indirect role will be mapped as direct in the SAP.

In general indirect roles can be identified through the "ORG_FLAG" in the ACTIVITYGROUPS XML field. We also tried targetsets but this is quite complicated and did not resolve the issue as wanted.

We came to the conclusion that the clean way would be a configuration fort he SAP connector to hide all indirect ACTIVITYGROUPS. I implemented this in the SAP Connector and the results are quite promising.
I think this change could benefit others and would like to contribute it to the SAP connector.


Did any of you had the same problem? Could you solve it in a way which we did not see? What do you think about a connector configuration idea and the contribution?

I would be happy if i could get some feedback.

Kind regards
Emil

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20220118/8ed35ac9/attachment.htm>