[midPoint] prune & reconciliation

Yakov Revyakin yrevyakin at gmail.com
Thu Feb 20 12:02:02 CET 2025


Hi all,
I can see that if policyActions are "record" or "enforcement" for
policyConstraints "exclusion" (SOD) then I can see appropriate evaluation
results after reconciliation if any relevant violations.
But if I use "prune" I can't see any changes running reconciliation -
conflicting roles are not unassigned.
Could someone explain why there is this difference in behavior? Is there
any way to force prune during reconciliation?
Thanks
Yakov
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20250220/3669356f/attachment.htm>


More information about the midPoint mailing list