[midPoint] Campaign definition filter on inducement

Hilmar Kistemaker hilmar.kistemaker at mollie.com
Wed Nov 15 16:40:29 CET 2023


Hi all,

I managed to create a campaign definition with an object filter that
returns roles that have specific Application Roles induced.

Example:

<query>
    <filter>
        <or>
            <and>
                <ref>
                    <path>inducement/targetRef</path>
                    <value>
                        <oid>d3a9049a-6680-4fd6-a3d0-bec74ddf4e6f</oid>
                    </value>
                </ref>
            </and>
            <and>
                <ref>
                    <path>inducement/targetRef</path>
                    <value>
                        <oid>887873ac-2653-4264-8b4f-ddeb6301a004</oid>
                    </value>
                </ref>
            </and>
        </or>
    </filter>
</query>


I'm looking for something similar to the above query that returns all roles
with a certain Resource Entitlement inducement.

The inducement in the role looks like this:

<inducement id="3">
    <construction>
        <resourceRef oid="4e3f8eb3-75b4-454b-b885-071aa5e8f831"
relation="org:default" type="c:ResourceType">
        </resourceRef>
        <kind>account</kind>
        <intent>default</intent>
        <association id="4">
            <ref>ri:Group</ref>
            <outbound>
                <expression>
                    <value xsi:type="c:ShadowAssociationType">
                        <shadowRef
oid="5e28f3cb-204a-4018-ab8b-cbaf2bbaa54c" type="c:ShadowType"/>
                    </value>
                </expression>
            </outbound>
        </association>
    </construction>
</inducement>


It would also be nice to be able to specify the name of the inducement
instead of the OID. Or part of a name, so that the query will return all
roles that have an inducement that start with a certain identifier or
prefix.

Hope someone can help.

Kind regards,
Hilmar
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20231115/698e0534/attachment.htm>


More information about the midPoint mailing list