[midPoint] Fwd: Some tricky questions about develop connectors. Hello!

[David Klement]

Hi Али,

regarding the most recent message in the thread, i.e., "make account and record fields without outbound mappings" - if I understand correctly, you wish to create an account on a resource using midPoint without actually having the corresponding account (i.e., its user object, shadow, etc.) in midPoint? Or, in a narrower case, you want midPoint to send account attributes to the resource without midPoint actually having the attributes saved in its database? In other words, you do not want midPoint to manage the accounts or account attributes in question. If that is the case, maybe it would be best to edit the data directly in the target resource, would it not?

Please let us know if I misunderstood your question. It is indeed true that connectors work directly with the resources, but they can only send them data that midPoint gives them, i.e., is instructed to send to the resource via the connector.

Best regards,

David Klement | Technical Writer
Evolveum, s. r. o.
dakle at evolveum.com | www.evolveum.com

----- Original Message -----
From: "midPoint General Discussion" <midpoint at lists.evolveum.com>
To: "midPoint General Discussion" <midpoint at lists.evolveum.com>
Cc: "Али Саад" <gerardo.saad at gmail.com>
Sent: Wednesday, November 5, 2025 7:36:05 PM
Subject: [midPoint] Fwd: Some tricky questions about develop connectors. Hello!

Guys please tell me one thing. How i can make account and record fields without outbound mappings. We use ur product and all of us don't know how to do it. Please help. We wanna create account, for example for REST Resource and also make account by administrator. We know only one way to do it - make outbound mapping and take some attributes, which we record before, from UserType. I think this is a horrible and wrong way. Please, tell me - how i can record fields by administrator. Maybe i must add some layers in my schemahandling on resources? But it doesn't work. 

---------- Forwarded message --------- 
От: Али Саад < [ mailto:gerardo.saad at gmail.com | gerardo.saad at gmail.com ] > 
Date: пн, 3 нояб. 2025 г. в 01:54 
Subject: Fwd: Some tricky questions about develop connectors. Hello! 
To: [ mailto:info at evolveum.com | info at evolveum.com ] < [ mailto:info at evolveum.com | info at evolveum.com ] > 




---------- Forwarded message --------- 
От: Али Саад < [ mailto:gerardo.saad at gmail.com | gerardo.saad at gmail.com ] > 
Date: сб, 1 нояб. 2025 г. в 19:46 
Subject: Some tricky questions about develop connectors. Hello! 
To: < [ mailto:midpoint at lists.evolveum.com | midpoint at lists.evolveum.com ] > 


Hello! Could you please explain the difference between the setRequired(true) and setCreateable(true) flags when defining ConnId attributes? 1. If the UID is generated by the target system, should we set required=false and createable=false? 2. For the Name attribute that midPoint must send when creating an account — should both flags be set to true? 3. If an attribute can be provided during object creation but is not mandatory, should it be required=false and createable=true? 4. Is it correct that we should never use required=true together with createable=false? Am I right that required=true means the attribute must be included in the Set<Attribute> passed to the create() method of the CreateOp interface? No to other operations. Only for Create? I'm trying to understand the practical meaning of these flags when designing a connector schema. 5. Additionally, I’m still confused about how account creation actually works in practice. For example, if I want to manually set the UID or other attributes when creating an account — how is this done? Is it controlled by inbound/outbound mappings, or by the connector schema itself? It’s quite hard to understand how midPoint decides which attributes to send during account creation on the first try. (I'm using midPoint 4.9.) 6. And one last question: what is the purpose of setReturnedByDefault(true)? Is it true that midPoint simply won’t expect such attributes by default, but it will still accept attributes marked with setReturnedByDefault(false) if they are present in the resource response? 7. I would also like to mention that I created an attribute on the diagram as a string for locking and unlocking __ENABLE__. Am I correct in understanding that Midpoint will still create it on the diagram with the type that it defines and recognizes—that is, as Boolean for special system attributes? According to the Special-Purpose Attributes table? Thank you very much in advance! 

_______________________________________________
midPoint mailing list
midPoint at lists.evolveum.com
https://lists.evolveum.com/mailman/listinfo/midpoint