[midPoint] inbound only resource on 4.8.8

Wed Apr 15 22:32:14 CEST 2026

I Think live sync is probably the answer but currently the view I have access to doesn’t have any kind of change log, or indicator that there is a new record

From: Rhian Resnick <rresnick at fau.edu>
Sent: Wednesday, April 15, 2026 3:04 PM
To: MidPoint General Discussion <midpoint at lists.evolveum.com>
Cc: Ashwill, Steven L <sashwill at uillinois.edu>; Wright, Becki <becki at uillinois.edu>
Subject: Re: inbound only resource on 4.8.8

We have had similar issues, we solve it with a nightly recon with the following Object Type Synchronization settings in the resource.

Basically, it does a fast recon with limited propagation of anything that is already linked, but does a sync and link/sync, when it matches a new user. In our case, it is how we bring student ID photos into the identity management world. The live sync acts inbound from the HR / Card resource for quick updates when images or other data updates.

That said it won’t instantly link, but for us nightly is fine.

<synchronization>
    <reaction id="38">
        <situation>unlinked</situation>
        <actions>
            <link id="41">
                <synchronize>true</synchronize>
            </link>
        </actions>
    </reaction>
    <reaction id="114">
        <situation>deleted</situation>
        <actions>
            <unlink id="115"/>
        </actions>
    </reaction>
    <reaction id="124">
        <situation>unmatched</situation>
        <actions>
            <unlink id="125"/>
        </actions>
    </reaction>

    <!— We typically limit this to a channel as we only want to sync on events —>
    <reaction id="127">
        <situation>linked</situation>

        <channel>http://midpoint.evolveum.com/xml/ns/public/provisioning/channels-3#liveSync<https://urldefense.com/v3/__http:/midpoint.evolveum.com/xml/ns/public/provisioning/channels-3*liveSync__;Iw!!DZ3fjg!6gJeBCN64JQk0x1YEuFhso5d9KhVsZ2QA1Hz5Tz1tjzVhTC7_PmSaLwNvLQO1quH8t7OTHsJIltw9bYqaU0rAg$></channel>

        <channel>http://midpoint.evolveum.com/xml/ns/public/common/channels-3#liveSync<https://urldefense.com/v3/__http:/midpoint.evolveum.com/xml/ns/public/common/channels-3*liveSync__;Iw!!DZ3fjg!6gJeBCN64JQk0x1YEuFhso5d9KhVsZ2QA1Hz5Tz1tjzVhTC7_PmSaLwNvLQO1quH8t7OTHsJIltw9ba-nNvQlg$></channel>

        <actions>
            <synchronize id="128"/>
        </actions>
    </reaction>

    <reaction id="18132">
        <situation>linked</situation>
        <channel>http://midpoint.evolveum.com/xml/ns/public/provisioning/channels-3#reconciliation<https://urldefense.com/v3/__http:/midpoint.evolveum.com/xml/ns/public/provisioning/channels-3*reconciliation__;Iw!!DZ3fjg!6gJeBCN64JQk0x1YEuFhso5d9KhVsZ2QA1Hz5Tz1tjzVhTC7_PmSaLwNvLQO1quH8t7OTHsJIltw9bY10PWTLw$></channel>
        <channel>http://midpoint.evolveum.com/xml/ns/public/common/channels-3#reconciliation<https://urldefense.com/v3/__http:/midpoint.evolveum.com/xml/ns/public/common/channels-3*reconciliation__;Iw!!DZ3fjg!6gJeBCN64JQk0x1YEuFhso5d9KhVsZ2QA1Hz5Tz1tjzVhTC7_PmSaLwNvLQO1quH8t7OTHsJIltw9bbBvnNgKQ$></channel>
        <actions>
          <synchronize id="13887">
            <limitPropagation>true</limitPropagation>
          </synchronize>
      </actions>
</reaction>
</synchronization>

Rhian Resnick
Director, Research Computing
Florida Atlantic University
Get Outlook for Mac <https://urldefense.com/v3/__https:/aka.ms/GetOutlookForMac__;!!DZ3fjg!6gJeBCN64JQk0x1YEuFhso5d9KhVsZ2QA1Hz5Tz1tjzVhTC7_PmSaLwNvLQO1quH8t7OTHsJIltw9bYSb7B_6g$>
From: midPoint <midpoint-bounces at lists.evolveum.com<mailto:midpoint-bounces at lists.evolveum.com>> on behalf of Ashwill, Steven L via midPoint <midpoint at lists.evolveum.com<mailto:midpoint at lists.evolveum.com>>
Date: Wednesday, April 15, 2026 at 3:32 PM
To: midpoint at lists.evolveum.com<mailto:midpoint at lists.evolveum.com> <midpoint at lists.evolveum.com<mailto:midpoint at lists.evolveum.com>>
Cc: Ashwill, Steven L <sashwill at uillinois.edu<mailto:sashwill at uillinois.edu>>, Wright, Becki <becki at uillinois.edu<mailto:becki at uillinois.edu>>
Subject: [midPoint] inbound only resource on 4.8.8
                EXTERNAL EMAIL : Exercise caution when responding, opening links, or opening attachments.

Hello,
I have set up an inbound only resource (HR data) and it seems to work fine with a manual import.  What I would like to do it when I get a new user in midpoint automatically, go check to see if there is data in the resource and link it up. I've tried an inducement with create and update turned off but I get this error: Attempt to add resource object without any attributes: shadow:null(null). I must be missing something.  I don't want to import everything from the resource because there are 100s of thousands of records of inactive users that I would never want in midpoint. I would assume this is a standard thing to do, can somebody help me.

STEVEN L ASHWILL
Software Engineer Coordinator
Administrative Information Technology Services
University of Illinois at Urbana-Champaign
50 Gerty Drive | M/C 673
Champaign, IL 61820
217.265.6337 | sashwill at uillinois.edu<mailto:sashwill at uillinois.edu>
https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.aits.uillinois.edu%2F&data=05%7C02%7Crresnick%40fau.edu%7C59ef383e28ae4848fbed08de9b25b2a2%7C63c3c9c1e824413fb4352f0cabb2828f%7C0%7C0%7C639118783386997131%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=82YXgSdOX%2Fzk6GuJFQfj2klHyS2oDU1eAFCpkTc7CW8%3D&reserved=0<http://www.aits.uillinois.edu/>

Under the Illinois Freedom of Information Act any written communication to or from university employees regarding university business is a public record and may be subject to public disclosure.

_______________________________________________
midPoint mailing list
midPoint at lists.evolveum.com<mailto:midPoint at lists.evolveum.com>
https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.evolveum.com%2Fmailman%2Flistinfo%2Fmidpoint&data=05%7C02%7Crresnick%40fau.edu%7C59ef383e28ae4848fbed08de9b25b2a2%7C63c3c9c1e824413fb4352f0cabb2828f%7C0%7C0%7C639118783387045570%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=pykkPQANcUuceeNU6f%2B9tgPBQmkfsNhC%2FnvvDEmmlrY%3D&reserved=0<https://urldefense.com/v3/__https:/lists.evolveum.com/mailman/listinfo/midpoint__;!!DZ3fjg!6gJeBCN64JQk0x1YEuFhso5d9KhVsZ2QA1Hz5Tz1tjzVhTC7_PmSaLwNvLQO1quH8t7OTHsJIltw9ba9rGRlwg$>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20260415/7bc01204/attachment-0001.htm>