[midPoint] Account and Entitlements from DatabaseTable Resource Connector

AXP axp.p at tiscali.it
Tue Mar 5 13:28:37 CET 2024


Hello,
In my project I chosen to integrate a MidPoint Resource with an external 
system by using DatabaseTable Connector. Simplifying the fields in the 
database table for example purposes, I have a data track as [username, 
status, roles] where roles is a comma separated string of roles assigned 
to each user in that resource (ex. "Administrator, Corporate Manager, 
Issuer").

Now I need to make my resource able to manage Accounts, Entitlements 
(from roles field) and its Association. The items of this resource will 
be NOT became Users and Roles, but only Correlated with ones coming from 
another resource.

I tried to create two "object type" in the resource, one with kind 
ACCOUNT (for username and status) and one with ENTITLEMENT kind and 
UserRole Intent.
The account are imported correctly but no luck for Entitlements: In my 
opinion I have to find a way to split the roles string by comma and 
create an Entitlement for each, the same entitlement may be assigned to 
one or more accounts. Then I have to fount a way to relate they by using 
Association feature.

Is it the correct way?
Is there a guide or an xml example to follow?
I searched in Documentation and in midpoint-samples repository on github 
but I found examples for that scope only for LDAP resource (where 
Entitlements are retrieved from LDAP by a call), and not for CSV or 
Database resource type

Any help is appreciated, Thanks
AXP
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20240305/f0d80e6b/attachment.htm>


More information about the midPoint mailing list