<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hi,<br>
<br>
On 11/02/2015 01:48 PM, Ivan Noris wrote:<br>
</div>
<blockquote cite="mid:56375BAF.5010303@evolveum.com" type="cite">
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
I have done this for another (not AD) directory using midpoint's
organizational structure, fetching the manager and his/her account
attribute(s), i.e. not using entitlements.<br>
</blockquote>
<br>
I can confirm that this is the right approach. At least for now. The
associations are designed to be used for account-entitlement or
entitlement-entitlement relations. I have not foreseen the need for
account-account association. As I'm thinking about it now there is
nothing in the architecture that would prohibit that. But it is
likely that the code is hardcoded in a way that the association
target is an entitlement. You can try it, but my guess is that it is
unlikely to work in current midPoint versions. However this might be
a nice addition for future midPoint versions. I have created a jira
for that:<br>
<br>
<a class="moz-txt-link-freetext" href="https://jira.evolveum.com/browse/MID-2668">https://jira.evolveum.com/browse/MID-2668</a><br>
<br>
It is currently scheduled for "distant future". If any midPoint
subscriber or contributor expresses enough "motivation" to implement
it then I will add it to the roadmap.<br>
<br>
<pre class="moz-signature" cols="72">--
Radovan Semancik
Software Architect
evolveum.com
</pre>
</body>
</html>