[midPoint] Association construction for multi-account resources

Om Bhallamudi om.bhallamudi at proton.ch
Tue Jun 3 13:42:37 CEST 2025


Hi,

I'm working with the multi-account feature (https://docs.evolveum.com/midpoint/reference/support-4.8/resources/multiaccounts/) in 4.8.5, and I am using mappings to create multiple accounts (same kind, intent, different tag) on a resource. I am stuck trying to perform association between entitlements/groups on the resource and one of the multiple accounts.

> <construction>
> <!-- multi account resource -->
> <resourceRef oid="..." relation="org:default" type="c:ResourceType" />
> <kind>account</kind>
> <intent>user_account</intent>
> <association id="44">
> <ref>ri:entitlement</ref>
> <outbound>
> <name>account-group-outbound</name>
> <strength>strong</strength>
> <expression>
> <associationFromLink>
> <projectionDiscriminator xsi:type="c:ShadowDiscriminatorType">
> <kind>entitlement</kind>
> <intent>entitlement</intent>
> </projectionDiscriminator>
> </associationFromLink>
> </expression>
> </outbound>
> </association></construction>

From what I can see, I can use kind and intent in the association construction, is there a way to use the tag​ too? Or perhaps some way to target a certain account?

Om Bhallamudi
Proton AG
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20250603/1b82e1f4/attachment.htm>


More information about the midPoint mailing list