[midPoint] Campaign definition filter on inducement
Hilmar Kistemaker
hilmar.kistemaker at mollie.com
Wed Nov 15 16:40:29 CET 2023
Hi all,
I managed to create a campaign definition with an object filter that
returns roles that have specific Application Roles induced.
Example:
<query>
<filter>
<or>
<and>
<ref>
<path>inducement/targetRef</path>
<value>
<oid>d3a9049a-6680-4fd6-a3d0-bec74ddf4e6f</oid>
</value>
</ref>
</and>
<and>
<ref>
<path>inducement/targetRef</path>
<value>
<oid>887873ac-2653-4264-8b4f-ddeb6301a004</oid>
</value>
</ref>
</and>
</or>
</filter>
</query>
I'm looking for something similar to the above query that returns all roles
with a certain Resource Entitlement inducement.
The inducement in the role looks like this:
<inducement id="3">
<construction>
<resourceRef oid="4e3f8eb3-75b4-454b-b885-071aa5e8f831"
relation="org:default" type="c:ResourceType">
</resourceRef>
<kind>account</kind>
<intent>default</intent>
<association id="4">
<ref>ri:Group</ref>
<outbound>
<expression>
<value xsi:type="c:ShadowAssociationType">
<shadowRef
oid="5e28f3cb-204a-4018-ab8b-cbaf2bbaa54c" type="c:ShadowType"/>
</value>
</expression>
</outbound>
</association>
</construction>
</inducement>
It would also be nice to be able to specify the name of the inducement
instead of the OID. Or part of a name, so that the query will return all
roles that have an inducement that start with a certain identifier or
prefix.
Hope someone can help.
Kind regards,
Hilmar
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20231115/698e0534/attachment.htm>
More information about the midPoint
mailing list