<div dir="ltr">Yes, that worked! Now when the user is removed from the CSV they are disabled on all resources including all accounts and then when they are added back all their accounts are re-enabled.<div><br></div><div>I have 1 last step to get this PoC working, and that is notifications! I am sure I will have questions later on,</div><div><br></div><div>Thanks Again,</div><div><br></div><div>JASON</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Oct 23, 2014 at 2:23 AM, Ivan Noris <span dir="ltr"><<a href="mailto:Ivan.Noris@evolveum.com" target="_blank">Ivan.Noris@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-family:times new roman,new york,times,serif;font-size:12pt;color:#000000"><div>Hi Jason,<br></div><div><br></div><div>from your XML I see the inbound for icfs:name:<br></div><div><br></div><div> <attribute> <br> <ref>icfs:name</ref> <br> <displayName>Name</displayName> <br> <limitations> <br> <minOccurs>0</minOccurs> <br> <access> <br> <read>true</read> <br> <add>true</add> <br> <modify>true</modify> <br> </access> <br> </limitations> <br> <inbound> <br> <target> <br> <path>$user/name</path> <br> </target> <br> </inbound> <br> </attribute> <br><div><br></div></div><div>user/name is constructed from icfs:name (identifier in CSV file). Which is ok.<br></div><div><br></div><div>In your correlation expression you also match users using icfs:name == user/name. Which is ok.<br></div><div><br></div><div>But... Your correlation expression is using XPath. Could you please rewrite it using the standard path expressions:<br></div><div><br></div><div><span class=""> <correlation><br> <q:equal><br> <q:path>c:name</q:path><br> <expression><br></span> <path><br> declare namespace icfs="<a href="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3" target="_blank">http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3</a>";<br> $account/attributes/icfs:name<br> </path><br> </expression><br> </q:equal><br> </correlation><br><div><br></div><div>If this helps, the problem is that you did not specify namespaces in Xpath expression (which would probably lead to an incorrect sample).<br></div><div><br></div><div>If this still does not help, please check if the user identifier is exactly the same (including case-sensitivity) after he/she is returned to the CSV feed. By default the matching is case-sensitive. I can't see any other possible cause yet.<br></div><div><br></div><div>See if it helps and let us know. Thank you.<br></div><div><br></div><div>Regards,<br></div><div>Ivan<br></div></div><div><br></div><hr><blockquote style="border-left:2px solid #1010ff;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt"><b>From: </b>"Jason Everling" <<a href="mailto:jeverling@bshp.edu" target="_blank">jeverling@bshp.edu</a>><br><b>To: </b>"midPoint General Discussion" <<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>><br><b>Sent: </b>Wednesday, October 22, 2014 9:09:32 PM<br><b>Subject: </b>Re: [midPoint] CSV Reactions<div><div class="h5"><br><div><br></div><div dir="ltr">Here is the config, I also attached the complete CSV config<div><br></div><div><div><span style="white-space:pre-wrap"> </span><synchronization></div><div><span style="white-space:pre-wrap"> </span><objectSynchronization></div><div><span style="white-space:pre-wrap"> </span><enabled>true</enabled></div><div><span style="white-space:pre-wrap"> </span><correlation></div><div><span style="white-space:pre-wrap"> </span><q:equal></div><div><span style="white-space:pre-wrap"> </span><q:path>c:name</q:path></div><div><span style="white-space:pre-wrap"> </span><expression></div><div><span style="white-space:pre-wrap"> </span><script></div><div><span style="white-space:pre-wrap"> </span><language><a href="http://www.w3.org/TR/xpath/" target="_blank">http://www.w3.org/TR/xpath/</a></language></div><div><span style="white-space:pre-wrap"> </span><code>$c:account/c:attributes/icfs:name</code></div><div><span style="white-space:pre-wrap"> </span></script></div><div><span style="white-space:pre-wrap"> </span></expression></div><div><span style="white-space:pre-wrap"> </span></q:equal></div><div><span style="white-space:pre-wrap"> </span></correlation></div><div><br></div><div><span style="white-space:pre-wrap"> </span><!-- Following section describes reactions to a situations --></div><div><span style="white-space:pre-wrap"> </span> </div><div><span style="white-space:pre-wrap"> </span><reaction></div><div><span style="white-space:pre-wrap"> </span><situation>linked</situation></div><div><span style="white-space:pre-wrap"> </span><action ref="<a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#modifyUser" target="_blank">http://midpoint.evolveum.com/xml/ns/public/model/action-3#modifyUser</a>"/></div><div><span style="white-space:pre-wrap"> </span></reaction></div><div><span style="white-space:pre-wrap"> </span><reaction></div><div><span style="white-space:pre-wrap"> </span><situation>deleted</situation></div><div><span style="white-space:pre-wrap"> </span><action ref="<a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#inactivateFocus" target="_blank">http://midpoint.evolveum.com/xml/ns/public/model/action-3#inactivateFocus</a>"/></div><div><span style="white-space:pre-wrap"> </span></reaction></div><div><span style="white-space:pre-wrap"> </span><reaction></div><div><span style="white-space:pre-wrap"> </span><situation>unlinked</situation></div><div><span style="white-space:pre-wrap"> </span><action ref="<a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#linkAccount" target="_blank">http://midpoint.evolveum.com/xml/ns/public/model/action-3#linkAccount</a>"/></div><div><span style="white-space:pre-wrap"> </span></reaction></div><div><span style="white-space:pre-wrap"> </span><reaction></div><div><span style="white-space:pre-wrap"> </span><situation>unmatched</situation></div><div><span style="white-space:pre-wrap"> </span><objectTemplateRef oid="10000000-0000-0000-0000-000000000201"/></div><div><span style="white-space:pre-wrap"> </span><action ref="<a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#addUser" target="_blank">http://midpoint.evolveum.com/xml/ns/public/model/action-3#addUser</a>"/></div><div><span style="white-space:pre-wrap"> </span><!--<action ref="<a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#linkAccount" target="_blank">http://midpoint.evolveum.com/xml/ns/public/model/action-3#linkAccount</a>"/>--></div><div><span style="white-space:pre-wrap"> </span></reaction></div><div><span style="white-space:pre-wrap"> </span></objectSynchronization></div><div><span style="white-space:pre-wrap"> </span></synchronization></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Oct 22, 2014 at 10:52 AM, Ivan Noris <span dir="ltr"><<a href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Jason,<br> <span><br> On 10/22/2014 04:20 PM, Jason Everling wrote:<br> > I got the CSV import to work correctly using a dump from our student<br> > information system for inbound sync only.<br> ><br> > I am having a difficult time deciding which reactions/actions to use<br> > for when a user is removed from the CSV resource file.<br> ><br> > The dump contains only active students/faculty/staff, if a user is not<br> > in the CSV file but exists in Midpoint I only want that account to be<br> > disabled, not deleted.<br> ><br> > In the current config the user is unlinked and I can change the<br> > deleted option to inactivateFocus which does disable the account but<br> > if that student is added back to the CSV file then the sync status<br> > errors out because the account already exists and for some reason<br> > cannot match the owner back, it tries to create a new account.<br> <br> </span>From what I read I suppose that you have a problem with the correlation<br> rule/expression. Can you please post it here along with the current<br> setup for reactions?<br> <span><br> ><br> > What is the best config for this to happen, e.g student leaves or<br> > withdraws, account is disabled, student comes back, account should be<br> > re-enabled.<br> <br> </span>Yes this looks reasonable. If the student gets back, midPoint should<br> find his/her user record in midPoint and link it again and synchronize<br> attributes. midPoint will execute addUser or modifyUser operation<br> according to the result of the correlation expression. I.e. if the<br> account matches existing user in midPoint, it can be linked and<br> attributes synchronized to midPoint. If the account does not match, for<br> midPoint it means it should create a new user. As username in midPoint<br> must be unique, it will probably fail (unless you generate the username).<br> <br> Regards,<br> I.<br> <span><span style="color:#888888" color="#888888"><br> --<br> Ing. Ivan Noris<br> Senior Identity Management Engineer<br> <a href="http://evolveum.com" target="_blank">evolveum.com</a><br> ___________________________________________<br> "Idem per idem - semper idem Vix."<br> <br> _______________________________________________<br> midPoint mailing list<br> <a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br> <a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br> </span></span></blockquote></div><br></div><br> <span style="font-size:small" size="2"><span style="font-size:small" size="2"><br></span></span><div><br></div></div></div><span style="font-size:small" size="2">CONFIDENTIALITY NOTICE:<br>This e-mail together with any attachments is proprietary and confidential; intended for only the recipient(s) named above and may contain information that is privileged. You should not retain, copy or use this e-mail or any attachments for any purpose, or disclose all or any part of the contents to any person. Any views or opinions expressed in this e-mail are those of the author and do not represent those of the Baptist School of Health Professions. If you have received this e-mail in error, or are not the named recipient(s), you are hereby notified that any review, dissemination, distribution or copying of this communication is prohibited by the sender and to do so might constitute a violation of the Electronic Communications Privacy Act, 18 U.S.C. section 2510-2521. Please immediately notify the sender and delete this e-mail and any attachments from your computer. </span><br><span class=""><div><br></div>_______________________________________________<br>midPoint mailing list<br><a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br><a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br></span></blockquote><span class=""><div><br><div><br></div></div><div><br></div><div>-- <br></div><div><span name="x"></span> Ing. Ivan Noris<br> Senior Identity Management Engineer<br> <a href="http://evolveum.com" target="_blank">evolveum.com</a><br> ___________________________________________<br> "Idem per idem - semper idem Vix."<span name="x"></span><br></div></span></div></div><br>_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br></div>
<br>
<font size="2"><br><br>CONFIDENTIALITY NOTICE:<br>This e-mail together with any attachments is proprietary and confidential; intended for only the recipient(s) named above and may contain information that is privileged. You should not retain, copy or use this e-mail or any attachments for any purpose, or disclose all or any part of the contents to any person. Any views or opinions expressed in this e-mail are those of the author and do not represent those of the Baptist School of Health Professions. If you have received this e-mail in error, or are not the named recipient(s), you are hereby notified that any review, dissemination, distribution or copying of this communication is prohibited by the sender and to do so might constitute a violation of the Electronic Communications Privacy Act, 18 U.S.C. section 2510-2521. Please immediately notify the sender and delete this e-mail and any attachments from your computer. </font><br>