[midPoint] Inducements Not Removed When Role Unassigned

[Chris Vermilya]

Hi All-

Still looking for help with this is anyone had an idea. Been pulling my hair out trying to find what configuration I have set incorrectly. Any help would be greatly appreciated!

When assigned, the role hierarchy is seen on the All Accesses tab, and when the parent role is removed, the child role remains in place and no longer shows as part of a hierarchy. It shows as a direct assignment.

[cid:image001.png at 01DB5E95.37AE4EF0]

[cid:image002.png at 01DB5E95.499AA050]

Thanks,
Chris


From: Chris Vermilya <chris at Loomsecurity.io>
Date: Wednesday, January 1, 2025 at 15:52
To: midpoint at lists.evolveum.com <midpoint at lists.evolveum.com>
Subject: Inducements Not Removed When Role Unassigned
Hi List-

I’m having an issue where role inducements are no being removed when the role is unassigned. The role is successfully unassigned, but the inducements on that role remain in place. I can manually remove those child inducements (and they properly remove the entitlement from the resource account), but it is not happening when the parent role is removed. There are no errors in the log, it just isn’t firing. What am I missing?

To add, I am using MidPoint to assign the role and the inducements are properly assigned during construction.

Thanks!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20250104/dff022f4/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 18113 bytes
Desc: image001.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20250104/dff022f4/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 8885 bytes
Desc: image002.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20250104/dff022f4/attachment-0003.png>