<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi Anand,<br>
<br>
correlation/confirmation expression tell midPoint, how to check if
the account in the resource has an owner in midPoint.<br>
<br>
Based on result, synchronization situation is determined (UNMATCHED,
UNLINKED, LINKED etc.) and corresponding action (link, delete, ...)
can be executed.<br>
<br>
These settings are per resource e.g. LDAP resource) and per object
type. In minimum configuration, for default account (kind=account,
intent=default). Different configuration can be specified for
different account types or other objects (e.g. groups).<br>
<br>
The configuration WHEN the synchronization should be performed
differs. It can be:<br>
- opportunistic sync: no tasks; midPoint can detect inconsistencies
while provisioning (i.e. trying to create an account in LDAP, but
the account is already there)<br>
- livesync: livesync task running; midPoint can detect
inconsistencies in real time (if the resource supports it; i.e.
OpenDJ or Oracle DSEE have changelog plugin which can be used).
Livesync task detects CHANGES in the resource accounts.<br>
- reconciliation: reconciliation task running; midPoint can detect
inconsistencies in scheduled times. Reconciliation task processes
ALL resource objects, not only changes.<br>
<br>
All or our resource samples with "-sync" in the filename should be
configured for livesync synchronization and they should also include
the task.<br>
<br>
Regards,<br>
I.<br>
<br>
<div class="moz-cite-prefix">On 02/17/2015 07:50 AM, Anand Kothekar
wrote:<br>
</div>
<blockquote
cite="mid:CAHUT-CQ4gjT_PXXC65ydGkiV28j6=YxBjNJRCUukNRaQBCq_7g@mail.gmail.com"
type="cite">
<div dir="ltr">Hi,
<div><br>
</div>
<div>I was working on Synchronization where I have a requirement
to keep data in resource and midpoint repository synchronized.</div>
<div><br>
</div>
<div>like If any account exists on ldap then it should be linked
with the user matching with the uid of user in midpoint.</div>
<div><br>
</div>
<div>I have gone through the concept of correlation and
confirmation expression but I am not clear with the proper
approach to follow.</div>
<div><br>
</div>
<div>please le me know how to achieve this and also mention any
sample example for it.<br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Thanks,</div>
<div>Anand</div>
<img moz-do-not-send="true" class="mailtrack-img"
src="https://mailtrack.io/trace/mail/2328e926999834e4f397ee31c6041c5e9a32fa2d.png"
height="0" width="0"></div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
evolveum.com evolveum.com/blog/
___________________________________________________
"Semper Id(e)M Vix."
</pre>
</body>
</html>