[midPoint] Association construction for multi-account resources

[Pavol Mederly]

Hello Om,

unfortunately, it's not possible to use tag in the projection 
discriminator. (Although the schema allows it, it is ignored by the code.)

I am quite surprised you have different tags for groups. Usually, they 
are used for accounts. What is your use case?

Best regards,

-- 
Pavol Mederly
Software developer
evolveum.com

On 03/06/2025 13:42, Om Bhallamudi via midPoint wrote:
> Hi,
>
> I'm working with the multi-account feature 
> (https://docs.evolveum.com/midpoint/reference/support-4.8/resources/multiaccounts/) 
> in 4.8.5, and I am using mappings to create multiple accounts (same 
> kind, intent, different tag) on a resource. I am stuck trying to 
> perform association between entitlements/groups on the resource and 
> one of the multiple accounts.
>
>     <construction>
>         <!-- multi account resource -->
>         <resourceRef oid="..." relation="org:default"
>     type="c:ResourceType" />
>         <kind>account</kind>
>         <intent>user_account</intent>
>         <association id="44">
>             <ref>ri:entitlement</ref>
>             <outbound>
>     <name>account-group-outbound</name>
>                 <strength>strong</strength>
>                 <expression>
>                     <associationFromLink>
>                         <projectionDiscriminator
>     xsi:type="c:ShadowDiscriminatorType">
>     <kind>entitlement</kind>
>     <intent>entitlement</intent>
>                         </projectionDiscriminator>
>                     </associationFromLink>
>                 </expression>
>             </outbound>
>         </association>
>     </construction>
>
>
> From what I can see, I can use kind and intent in the association 
> construction, is there a way to use the |tag|​too? Or perhaps some way 
> to target a certain account?
>
> Om Bhallamudi
> Proton AG
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> https://lists.evolveum.com/mailman/listinfo/midpoint
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20250603/8b512ace/attachment.htm>