[midPoint] Question about parametric inducements

[Pilar von Pilchau Wenzel - AKDB]

Hi,

I have a question about parametric inducements.

What I have understood so far from reading the docs:

  1.
Application roles are the lowest level of roles and define access to an application
  2.
If possible, application roles should not be assigned directly to a user
  3.
The hierarchy shoud be business role -> application role (via inducement)

I want to define an application role with an orgRef. I have a business role that I assign to a user with an orgRef which I can set when I do the assignment. Now I want to add an inducement of the application role that takes the orgRef from the business role assignment.
Unfortunately, I could not find a way to set the orgRef from the inducement dynamically. It worked when I set it manually. The only solution that I found so far was using a focus mapping and create an assignment of the application role to the user with the orgRef taken from the business role assignment. But then I have an assignment of the application role on the user, which is what I should avoid.

So my question is, am I even on the right track? And if so, is there a way to parametrize the inducement dynamically?

I am still at my first steps with midpoint and happy for any suggestions.

Best regards

Dr. Wenzel Pilar von Pilchau
Prozessanalyst
Process Management & Digitalisation
[Mobile]  +49 162 2530060
[Email]  Pilar-von-Pilchau.Wenzel at akdb.de<mailto:Pilar-von-Pilchau.Wenzel at akdb.de>
AKDB · Anstalt des öffentlichen Rechts
Hansastraße 12-16 · 80686 München
www.akdb.de<https://www.akdb.de/>
[AKDB Logo]
[Great Place to Work Certified]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20260428/ba43a5d3/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-Mobile.png
Type: image/png
Size: 404 bytes
Desc: Outlook-Mobile.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20260428/ba43a5d3/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-Email.png
Type: image/png
Size: 924 bytes
Desc: Outlook-Email.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20260428/ba43a5d3/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-AKDB Logo.png
Type: image/png
Size: 3456 bytes
Desc: Outlook-AKDB Logo.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20260428/ba43a5d3/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-Great Plac.png
Type: image/png
Size: 72182 bytes
Desc: Outlook-Great Plac.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20260428/ba43a5d3/attachment-0007.png>