[midPoint] Group association with accounts of different intents

Yakov Revyakin yrevyakin at gmail.com
Fri Apr 12 12:45:31 CEST 2024


I have AD group roles - name of role is equal to group name and the role
has the group shadow linked.
I am able to assign this role to a user using the standard metarole
approach resulting in appropriate association and membership. This works
excellent if there is a single account object type intent. The metarole
knows which intent to consider.
I'd like to be able to associate AD accounts of different intents with
those groups.
Have you any idea how to implement this? Probably something like an
intermediate role which knows what intent to use...
Thanks,
Yakov
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20240412/9bd14ce9/attachment.htm>


More information about the midPoint mailing list