[midPoint] R: R: Resource doesn't link accounts
Ivan Noris
ivan.noris at evolveum.com
Fri Mar 6 08:27:15 CET 2026
Hi Lucio,
if you have users in midPoint without archetypes which you wish to
provision to target systems, I recommend to not use archetype in the
last Basic configuration step of the target resource object type.
Otherwise midPoint requires the archetype being assigned to all those
users and won't match the users during correlation.
Relevant docs (for midPoint 4.10):
https://docs.evolveum.com/midpoint/reference/support-4.10/admin-gui/resource-wizard/object-type/#specify-the-midpoint-data
Best regards,
Ivan
On 3/5/26 17:18, Lucio Fioramonti wrote:
> Hello, thanks for the explanation. Regarding your questions:
>
> What is the situation with archetypes in your environment? --> Are in
> place only standard archetypes.
>
> Is this particular resource a source or a target resource? --> This is
> a target resource.
>
> Are there other resources, which create users and assign Person
> archetype? --> yes and, I have check, it creates users with no
> archetype specified.
>
> Are there users without Person archetype? --> I think so, I have check
> in the raw configuration of the users, and no archetype relations are
> specified, if I check correctly.
>
>
> Regards
> /
> /
>
>
>
> ------------------------------------------------------------------------
> *Da:* Ivan Noris <ivan.noris at evolveum.com>
> *Inviato:* giovedì 5 marzo 2026 12:45
> *A:* Lucio Fioramonti <lucio.fioramonti at cybertech.eu>;
> midpoint at lists.evolveum.com <midpoint at lists.evolveum.com>
> *Oggetto:* Re: R: [midPoint] Resource doesn't link accounts
> Hi Lucio, the thing is: if you specify the correlation rule AND you
> also have set Archetype in the (last page of) object type
> configuration, they are used together. Correlation will only match
> objects (e. g. users) with that archetype. If the
> ZjQcmQRYFpfptBannerStart
> **** Avviso di sicurezza: Questa email proviene dall'esterno
> dell'organizzazione. Non cliccare su link né aprire allegati a meno
> che tu non abbia verificato l'indirizzo del mittente e confermato che
> il contenuto sia sicuro! ****
> *** Security Warning: This email originated from outside of the
> organization. Do not click links or open attachments unless you
> verified the sender mail address and know the content is safe! ***
> ZjQcmQRYFpfptBannerEnd
>
> Hi Lucio,
>
>
> the thing is: if you specify the correlation rule AND you also have
> set Archetype in the (last page of) object type configuration, they
> are used together. Correlation will only match objects (e.g. users)
> with that archetype. If the are users which would match but do not
> have that archetype, they won't be considered as candidate owners.
>
>
> What is the situation with archetypes in your environment? Is this
> particular resource a source or a target resource?
>
> Are there other resources, which create users and assign Person archetype?
>
> Are there users without Person archetype?
>
>
> Best regards,
>
> Ivan
>
>
> On 3/5/26 12:31, Lucio Fioramonti wrote:
>
> Hello Ivan, thank you for the reply. I have set Person as
> archetype. Now I have removed the archetype from the Object Type
> and it works: now I have the preview and the Unlinked status.
>
> So should I omit the archetype or to have users of the same
> archetype for a correct correlation?
>
> Thanks
>
> ------------------------------------------------------------------------
> *Da:* midPoint <midpoint-bounces at lists.evolveum.com>
> <mailto:midpoint-bounces at lists.evolveum.com> per conto di Ivan
> Noris via midPoint <midpoint at lists.evolveum.com>
> <mailto:midpoint at lists.evolveum.com>
> *Inviato:* giovedì 5 marzo 2026 08:35
> *A:* midpoint at lists.evolveum.com
> <mailto:midpoint at lists.evolveum.com> <midpoint at lists.evolveum.com>
> <mailto:midpoint at lists.evolveum.com>
> *Cc:* Ivan Noris <ivan.noris at evolveum.com>
> <mailto:ivan.noris at evolveum.com>
> *Oggetto:* Re: [midPoint] Resource doesn't link accounts
> Hi Lucio, it would help if you describe your environment more: 1.
> what are your synchronization rules? 2. are you using archetypes
> in midPoint? In Basic configuration of your object type, in the
> last page, where you specify "User" as the type,
> ZjQcmQRYFpfptBannerStart
> **** Avviso di sicurezza: Questa email proviene dall'esterno
> dell'organizzazione. Non cliccare su link né aprire allegati a
> meno che tu non abbia verificato l'indirizzo del mittente e
> confermato che il contenuto sia sicuro! ****
> *** Security Warning: This email originated from outside of the
> organization. Do not click links or open attachments unless you
> verified the sender mail address and know the content is safe! ***
> ZjQcmQRYFpfptBannerEnd
>
> Hi Lucio,
>
> it would help if you describe your environment more:
>
>
> 1. what are your synchronization rules?
>
> 2. are you using archetypes in midPoint? In Basic configuration of
> your object type, in the last page, where you specify "User" as
> the type, are you also using archetype (e.g. Person)? Does this
> archetype match the users already in midPoint?
>
> (Correlation uses the archetype information during matching, if
> you have specified that you want to use archetype).
>
> 3. what is the Lifecycle state of the resource / Object type / all
> other configuration in the resource?
>
>
> Best regards,
>
> Ivan
>
>
> On 3/4/26 14:29, Lucio Fioramonti via midPoint wrote:
>
> Hello, I have a database resource (Postgresql) created from
> scratch by using the wizard. Resource objects (accounts) are
> visibile in Midpoint console, correlation rule,
> synchronization (with no rule for unmatched) and mapping are
> in place. There are corresponding users and the correlation is
> mailny based on emailAddress (exact match).
>
> When I ask for Import Preview, no results appear (white
> page!). Only result is possible if I add unmatched rule in
> synchronization config (unmatched --> add focus), but,
> obviously, an add action fo user object appear.
>
> Why the correlation doesn't link the account? Why the preview
> appears blank? Are there any db resourxe example with
> correlation and synch config?
>
> /Thanks in advance./
>
> _______________________________________________ midPoint
> mailing list midPoint at lists.evolveum.com
> <mailto:midPoint at lists.evolveum.com>
> https://lists.evolveum.com/mailman/listinfo/midpoint
> <https://urldefense.com/v3/__https://lists.evolveum.com/mailman/listinfo/midpoint__;!!LQkDIss!TQzF0GutWXxXaFCVP6CR4oBxXdXQBIIphcNUqZ5vyxNjT7gGOi0PtJ9EFraesC95H8Q9Wu7uV8T1iAY18cS0rVUPRlgPmjD8Lw$>
>
>
> -- Ivan Noris Expert Identity Engineer evolveum.com
> <https://urldefense.com/v3/__http://evolveum.com__;!!LQkDIss!TQzF0GutWXxXaFCVP6CR4oBxXdXQBIIphcNUqZ5vyxNjT7gGOi0PtJ9EFraesC95H8Q9Wu7uV8T1iAY18cS0rVUPRlj8zavrvQ$>
>
>
> -- Ivan Noris Expert Identity Engineer evolveum.com
> <https://urldefense.com/v3/__http://evolveum.com__;!!LQkDIss!WOBBj4hYpdMG9RrwwmCY9lnDkF23zgMc3egv2kuNkBlA_BMSq6vo4GKyVRU2rAxmZ94GisWfvE_wL0aGt8LUOkbaXkPqHcj_$>
>
--
Ivan Noris
Expert Identity Engineer
evolveum.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20260306/8bc3141b/attachment-0001.htm>
More information about the midPoint
mailing list