<div dir="ltr"><span style="font-size:12.8000001907349px">Hi,</span><div style="font-size:12.8000001907349px"><br></div><div style="font-size:12.8000001907349px">Thanks Ivan, it got working. I was not waiting for "Trigger Scanner" to run.</div><div style="font-size:12.8000001907349px"><br></div><div style="font-size:12.8000001907349px">Thanks for your help.</div><div><span style="font-size:12.8000001907349px"><br></span></div><div><span style="font-size:12.8000001907349px"><br></span></div><div><span style="font-size:12.8000001907349px"><br></span></div><div><span style="font-size:12.8000001907349px">Regards,</span></div><div><span style="font-size:12.8000001907349px">Pavan </span><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Feb 17, 2015 at 6:24 PM, Anand Kothekar <span dir="ltr"><<a href="mailto:anand.kothekar@confluxsys.com" target="_blank">anand.kothekar@confluxsys.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><br><div class="gmail_quote">---------- Forwarded message ----------<br>From: <b class="gmail_sendername">Ivan Noris</b> <span dir="ltr"><<a href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>></span><br>Date: Tue, Feb 17, 2015 at 6:14 PM<br>Subject: Re: [midPoint] Specifying Temporary Role/Resource To User<br>To: <a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a><br><br><br>
<div bgcolor="#FFFFFF" text="#000000">
Hi Pavan,<br>
<br>
are you setting the validFrom / validTo attributes in user's
assignments, or somewhere else?<br>
<br>
Temporary assignment means:<br>
- edit user<br>
- click the wheel icon in Assignments - Assign role<br>
- select a role<br>
- before saving, set the assignment's (the new role) attributes
Valid From / Valid To (or Administrative Status)<br>
- save<br>
<br>
MidPoint model will evaluate the assignment parameters and should
behave accordingly. If you have validFrom date in the future, the
role will be assigned, but the resource account will not be created
until validFrom date passes. Similar for validTo.<br>
<br>
The process evaluation is done by midPoint, running Trigger or
Validity scheduled task automatically.<br>
<br>
By default the assigned account is invalidated by deleting. We have
also "disable instead of delete" configuration, which is per
resource configuration:
<a href="https://wiki.evolveum.com/display/midPoint/Resource+Schema+Handling%3A+Activation" target="_blank">https://wiki.evolveum.com/display/midPoint/Resource+Schema+Handling%3A+Activation</a><br>
<br>
Regards,<br>
Ivan<div><div class="h5"><div><div><br>
<br>
<div>On 02/17/2015 01:25 PM, Pavan Bule
wrote:<br>
</div>
</div></div></div></div><blockquote type="cite"><div><div class="h5"><div><div>
<div dir="ltr">Hi,
<div><br>
</div>
<div>Thanks Ivan. I tried few things and it worked for me.</div>
<div><br>
</div>
<div>My requirement is that I have one role which has one
resource as an inducement.</div>
<div>now when I assign this role to user, i am specifying the
time limitation to role through ValidFrom and ValidTo
attributes.</div>
<div><br>
</div>
<div>I am expecting that the resource should be available to
user after specified start time and should get disabled or
removed after end time.</div>
<div><br>
</div>
<div>But my observation is that when we specify ValidFrom and
ValidTo attributes for making resource temporary through role,
the induced resource is not getting added at all. But if we
try same thing without specifying time limitation (ValidFrom
and ValidTo), induced resource is getting added successfully.</div>
<div><br>
</div>
<div>Please provide me any pointers on making resource temporary
through role inducements.</div>
<div><br>
</div>
<div><br>
</div>
<div>Regards,</div>
<div>Pavan </div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Feb 16, 2015 at 7:21 PM, Pavan
Bule <span dir="ltr"><<a href="mailto:pavan.bule@confluxsys.com" target="_blank">pavan.bule@confluxsys.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><span style="font-size:12.8000001907349px">Hi,</span>
<div style="font-size:12.8000001907349px"><br>
</div>
<div style="font-size:12.8000001907349px">I have recently
started using midpoint for evaluation. I have a midpoint
environment in my system configured with an ldap
resource.</div>
<div style="font-size:12.8000001907349px"><br>
</div>
<div style="font-size:12.8000001907349px">I was trying to
provide temporary Role/Resource to User.</div>
<div style="font-size:12.8000001907349px"><br>
</div>
<div style="font-size:12.8000001907349px">- I specified <b>valid
from and valid to </b>attributes in gui while
assigning role to user.</div>
<div style="font-size:12.8000001907349px"><br>
</div>
<div style="font-size:12.8000001907349px"> but found out
that its not working so, I wanted to ensure that is this
functionality implemented in your current version 3.1 as
I am using the same version.</div>
<div style="font-size:12.8000001907349px"><br>
</div>
<div style="font-size:12.8000001907349px"> If yes please
guide me whether I need to do further more modification
to achive this functionality.</div>
<div style="font-size:12.8000001907349px"><br>
</div>
<div style="font-size:12.8000001907349px"><br>
</div>
<div style="font-size:12.8000001907349px">Regards,</div>
<div style="font-size:12.8000001907349px">Pavan</div>
</div>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
</div></div></div></div><span><pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><span class="HOEnZb"><font color="#888888">
</font></span></pre><span class="HOEnZb"><font color="#888888">
</font></span></span></blockquote><span class="HOEnZb"><font color="#888888"><span>
<br>
<pre cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
<a href="http://evolveum.com" target="_blank">evolveum.com</a> <a href="http://evolveum.com/blog/" target="_blank">evolveum.com/blog/</a>
___________________________________________________
"Semper Id(e)M Vix."
</pre>
</span></font></span></div><span class="HOEnZb"><font color="#888888">
<br>_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br></font></span></div><br></div>
</blockquote></div><br></div>