<HTML><HEAD>
<STYLE id=eMClientCss>BLOCKQUOTE.cite2 {
MARGIN-TOP: 3px; PADDING-TOP: 0px; PADDING-LEFT: 10px; MARGIN-LEFT: 5px; BORDER-LEFT: #cccccc 1px solid; PADDING-RIGHT: 0px; MARGIN-RIGHT: 0px
}
.plain PRE {
FONT-SIZE: 100%; FONT-FAMILY: monospace; FONT-WEIGHT: normal; FONT-STYLE: normal
}
.plain TT {
FONT-SIZE: 100%; FONT-FAMILY: monospace; FONT-WEIGHT: normal; FONT-STYLE: normal
}
A IMG {
BORDER-TOP: 0px; BORDER-RIGHT: 0px; BORDER-BOTTOM: 0px; BORDER-LEFT: 0px
}
#x1af43c66bde24f3596443c2267f6ce98 {
FONT-SIZE: 12pt; FONT-FAMILY: Tahoma
}
#x5092e65317d44284bcc3d19ee8fc52eb {
FONT-SIZE: 12pt; FONT-FAMILY: Tahoma
}
.plain PRE {
FONT-SIZE: 12pt; FONT-FAMILY: Tahoma
}
.plain TT {
FONT-SIZE: 12pt; FONT-FAMILY: Tahoma
}
BODY {
FONT-SIZE: 12pt; FONT-FAMILY: Tahoma
}
#x5092e65317d44284bcc3d19ee8fc52eb BLOCKQUOTE.cite {
PADDING-LEFT: 10px; MARGIN-LEFT: 5px; BORDER-LEFT: #cccccc 1px solid; PADDING-RIGHT: 0px; MARGIN-RIGHT: 0px
}
</STYLE>
<STYLE>#x1af43c66bde24f3596443c2267f6ce98 BLOCKQUOTE.cite2
{MARGIN-TOP: 3px; PADDING-TOP: 0px; PADDING-LEFT: 10px; MARGIN-LEFT: 5px; BORDER-LEFT: #cccccc 1px solid; PADDING-RIGHT: 0px; MARGIN-RIGHT: 0px}
#x1af43c66bde24f3596443c2267f6ce98 .plain PRE, #x1af43c66bde24f3596443c2267f6ce98 .plain TT
{FONT-SIZE: 100%; FONT-FAMILY: monospace; FONT-WEIGHT: normal; FONT-STYLE: normal}
#x1af43c66bde24f3596443c2267f6ce98 A IMG
{BORDER-TOP: 0px; BORDER-RIGHT: 0px; BORDER-BOTTOM: 0px; BORDER-LEFT: 0px}
#x1af43c66bde24f3596443c2267f6ce98 .plain PRE, #x1af43c66bde24f3596443c2267f6ce98 .plain TT, #x1af43c66bde24f3596443c2267f6ce98
{FONT-SIZE: 12pt; FONT-FAMILY: Tahoma}
</STYLE>
</HEAD>
<BODY bgColor=#ffffff scroll=auto class>
<DIV>Hi Pavol,<BR>first thing - thanks for very very quick answer! :-)<BR>Yes, You understand it correctly. LoginName in authoritative app is not necessary, its only one of possibilities - see later.<BR></DIV>
<DIV>I have two ideas - see scenarios:<BR></DIV>
<DIV>First choice - login is in authoritative app:<BR>1) user is Jana Novakova, login name jana.novakova is in authoritative app, in midPoint and in all other apps.<BR>2) user change last name to Svobodova; loginname in authoritative app is changed to jana.svobodova, midPoint invokes workflow "changing loginname" to jana.svobodova, nothing changes in all other apps<BR>3) workflow is approved, loginName is changed in all others apps.<BR></DIV>
<DIV>Second choice - login is not in authoritative app, login generates in midPoint:<BR>1) user is Jana Novakova, login name jana.novakova is in midPoint and in all other apps.<BR>2) user change last name to Svobodova; last name in midPoint is changed to Svobodova, midPoint invokes workflow "changing loginname" to jana.svobodova, nothing changes in all other apps<BR>3) workflow is approved, loginName is changed in all others apps.</DIV>
<DIV> </DIV>
<DIV><SPAN id=xcb69f933c1634f79993670e28a63cb28 style="BACKGROUND-COLOR: #ffffff">
<DIV></DIV></SPAN></DIV>
<DIV>Simpler solution is better solution... :-)</DIV>
<DIV> </DIV>
<DIV>Regards!</DIV>
<DIV>Thanks!</DIV>
<DIV> </DIV>
<DIV id=signature_old>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: Tahoma">
<TABLE style="WHITE-SPACE: normal; WORD-SPACING: 0px; BORDER-COLLAPSE: collapse; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: medium 'Times New Roman'; WIDOWS: 1; LETTER-SPACING: normal; TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px">
<TBODY>
<TR>
<TD style="FONT-SIZE: 11px; FONT-FAMILY: Arial, sans-serif; VERTICAL-ALIGN: bottom; COLOR: rgb(0,0,0)" colSpan=2>
<P><SPAN style="FONT-SIZE: 14px; FONT-WEIGHT: bold">Roman Pudil</SPAN><BR>solution architect<BR><BR>gsm: [+420] 775 663 666<BR>e-mail:<SPAN class=Apple-converted-space> </SPAN><A href="mailto:roman.pudil@ami.cz">roman.pudil@ami.cz</A></P></TD>
<TD style="BORDER-RIGHT: rgb(204,204,204) 1px solid"> </TD>
<TD> </TD>
<TD style="FONT-SIZE: 11px; FONT-FAMILY: Arial, sans-serif; VERTICAL-ALIGN: bottom; COLOR: rgb(0,0,0)">
<P>AMI Praha a.s.<BR>Pláničkova 11<BR>162 00 Praha 6<BR>tel./fax: [+420] 274 783 239<BR>web:<SPAN class=Apple-converted-space> </SPAN><A href="http://www.ami.cz/">www.ami.cz</A></P></TD>
<TD style="BORDER-RIGHT: rgb(204,204,204) 1px solid"> </TD>
<TD> </TD>
<TD style="FONT-SIZE: 11px; FONT-FAMILY: Arial, sans-serif; COLOR: rgb(0,0,0)">
<P><IMG title="AMI Praha a.s." border=0 alt="" src="http://www.ami.cz/images/podpis/ami_logo.gif"></P></TD></TR>
<TR>
<TD colSpan=8><BR><A href="http://www.ami.cz/reseni-a-sluzby/bezpecnost-dat/identity-management"><IMG border=0 alt="" src="http://www.ami.cz/images/podpis/AMI-podpis-IdM_1.png"></A></TD></TR>
<TR>
<TD style="FONT-SIZE: 11px; FONT-FAMILY: Arial, sans-serif; COLOR: rgb(128,128,128)" colSpan=8><BR>Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za společnost AMI Praha a.s.<BR>jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně písemnou formu.</TD></TR></TBODY></TABLE></DIV></DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>------ Původní zpráva ------</DIV>
<DIV>Od: "Pavol Mederly" <<A href="mailto:mederly@evolveum.com">mederly@evolveum.com</A>></DIV>
<DIV>Komu: <A href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</A></DIV>
<DIV>Odesláno: 23.2.2016 14:11:29</DIV>
<DIV>Předmět: Re: [midPoint] Invoke workflow during attribute changing</DIV>
<DIV> </DIV>
<DIV id=x1af43c66bde24f3596443c2267f6ce98 style="COLOR: #000000">
<BLOCKQUOTE class=cite2 cite=56CC5A81.9080508@evolveum.com type="cite">Hello Roman.<BR><BR>Current implementation of workflows is aimed towards approving so called primary changes - i.e. changes explicitly requested by user (via GUI) or external application (via SOAP, REST or Java API). We could potentially deal also with changes coming from resources, but it is a bit more tricky.<BR><BR>Before trying to answer your question I'd need to understand it more deeply. So, you have an authoritative resource. When a login name changes on that resource for an account, currently this change is propagated to other resources. And you'd like to be able to control this process: i.e. either allow or disallow the change on connected resources.<BR><BR>My questions are:<BR><BR>1) Do I understand it correctly?<BR><BR>2) Is the allow/reject decision of "all or nothing" nature, i.e. is the login name change either allowed on all resources, or rejected for all resources? Or you'd like to be able to say: "allow change on resources 1, 2, 3 but not on resources 4, 5, 6" ?<BR><BR>3) What about reconciliations? Imagine that you rejected a change today. But (let's say) tonight there will be another reconciliation and the change would pop up again. The workflow would be started again, and again it should be either allowed and rejected. And so on, and so on - each time when the reconciliation would be run. What to do with this?<BR><BR>Best regards,<BR>Pavol<BR><BR>
<DIV class=moz-cite-prefix>On 23.02.2016 13:58, Roman Pudil - AMI Praha a.s. wrote:<BR></DIV>
<BLOCKQUOTE class=cite cite=mid:em2d673800-bca0-4d93-b3a6-436782bbde41@rpudil-dell7440 type="cite">
<DIV>Hi all,</DIV>
<DIV>how to invoke workflow when changing some identity attribute?</DIV>
<DIV>I want invoke workflow in midPoint, during loginname in authoritative resource changing. I don't want to change loginname automaitcally in all connected resources. I want to control it.</DIV>
<DIV> </DIV>
<DIV>Thanks!</DIV>
<DIV> </DIV>
<DIV>Regards</DIV>
<DIV> </DIV>
<DIV id=signature_old>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: Tahoma">
<TABLE style="WHITE-SPACE: normal; WORD-SPACING: 0px; BORDER-COLLAPSE: collapse; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: medium 'Times New Roman'; WIDOWS: 1; LETTER-SPACING: normal; TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px">
<TBODY>
<TR>
<TD style="FONT-SIZE: 11px; FONT-FAMILY: Arial,
sans-serif; VERTICAL-ALIGN: bottom; COLOR: rgb(0,0,0)" colSpan=2>
<P><SPAN style="FONT-SIZE: 14px; FONT-WEIGHT: bold">Roman Pudil</SPAN><BR>solution architect<BR><BR>gsm: [+420] 775 663 666<BR>e-mail:<SPAN class=Apple-converted-space> </SPAN><A href="mailto:roman.pudil@ami.cz" moz-do-not-send="true"><A class=moz-txt-link-abbreviated href="mailto:roman.pudil@ami.cz">roman.pudil@ami.cz</A></A></P></TD>
<TD style="BORDER-RIGHT: rgb(204,204,204) 1px solid"> </TD>
<TD> </TD>
<TD style="FONT-SIZE: 11px; FONT-FAMILY: Arial,
sans-serif; VERTICAL-ALIGN: bottom; COLOR: rgb(0,0,0)">
<P>AMI Praha a.s.<BR>Pláničkova 11<BR>162 00 Praha 6<BR>tel./fax: [+420] 274 783 239<BR>web:<SPAN class=Apple-converted-space> </SPAN><A href="http://www.ami.cz/" moz-do-not-send="true"><A class=moz-txt-link-abbreviated href="http://www.ami.cz/">www.ami.cz</A></A></P></TD>
<TD style="BORDER-RIGHT: rgb(204,204,204) 1px solid"> </TD>
<TD> </TD>
<TD style="FONT-SIZE: 11px; FONT-FAMILY: Arial,
sans-serif; COLOR: rgb(0,0,0)">
<P><IMG title="AMI Praha a.s." border=0 alt="" src="http://www.ami.cz/images/podpis/ami_logo.gif" moz-do-not-send="true"></P></TD></TR>
<TR>
<TD colSpan=8><BR><A href="http://www.ami.cz/reseni-a-sluzby/bezpecnost-dat/identity-management" moz-do-not-send="true"><IMG border=0 alt="" src="http://www.ami.cz/images/podpis/AMI-podpis-IdM_1.png" moz-do-not-send="true"></A></TD></TR>
<TR>
<TD style="FONT-SIZE: 11px; FONT-FAMILY: Arial,
sans-serif; COLOR: rgb(128,128,128)" colSpan=8><BR>Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za společnost AMI Praha a.s.<BR>jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně písemnou formu.</TD></TR></TBODY></TABLE></DIV></DIV>
<DIV> </DIV><BR>
<FIELDSET class=mimeAttachmentHeader></FIELDSET> <BR><PRE wrap="">_______________________________________________
midPoint mailing list
<A class=moz-txt-link-abbreviated href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</A>
<A class=moz-txt-link-freetext href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</A>
</PRE></BLOCKQUOTE><BR></BLOCKQUOTE></DIV></BODY></HTML>