<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-15">
<style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} p
{margin-top:0;
margin-bottom:0}--></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Hi Ivan,</p>
<p>Thanks for helping. This solved my problem.<br>
</p>
<p><br>
</p>
<p>Regards,</p>
<p>Aivo Kuhlberg<br>
</p>
<div style="color: rgb(33, 33, 33);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>Saatja:</b> midPoint <midpoint-bounces@lists.evolveum.com> nimelIvan Noris <ivan.noris@evolveum.com><br>
<b>Saadetud:</b> 13. aprill 2016 11:22<br>
<b>Adressaat:</b> midpoint@lists.evolveum.com<br>
<b>Teema:</b> Re: [midPoint] Creating AD account automatically</font>
<div> </div>
</div>
<div>Hi Aivo,<br>
<br>
please try to update the <attribute> with this:<br>
<attribute><br>
<ref>icfs:name</ref><br>
<displayName>Distinguished Name</displayName><br>
<b> <limitations></b><b><br>
</b><b> <minOccurs>0</minOccurs></b><b><br>
</b><b> </limitations>
</b><br>
...<br>
<br>
This will "fix" the problem when GUI requires the value being present even if it's computed in the mappings.<br>
See the samples for AD (samples/resources/ad/) if using the ADSI based AD connector.<br>
You may need the same for other attributes such as "sn", sAMAccountName, etc.<br>
<br>
Regards,<br>
Ivan<br>
<br>
<div class="moz-cite-prefix">On 04/13/2016 09:37 AM, Aivo Kuhlberg wrote:<br>
</div>
<blockquote type="cite"><style type="text/css" style="">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<p>How can I create AD user account automatically when I assign resource account to user in midPoint 3.3.1? Currently when I add resource assignment to user and click 'Save' button it complains: "'ConnId Name' is required". When I fill in the 'ConnId Name'
attribute then the user account is created in AD. Why it does not use outbound mapping in schema handling?<br>
icfs:name mapping is currently following:<br>
...<br>
<attribute><br>
<c:ref xmlns:icfs=<a class="moz-txt-link-rfc2396E" href="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3">"http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3"</a>>icfs:name</c:ref><br>
<tolerant>true</tolerant><br>
<exclusiveStrong>false</exclusiveStrong><br>
<outbound><br>
<source><br>
<c:path>$user/givenName</c:path><br>
</source><br>
<source><br>
<c:path>$user/familyName</c:path><br>
</source><br>
<expression><br>
<script><br>
<code><br>
return 'CN=' + givenName + ' ' + familyName + ',OU=Users,OU=TEST2,DC=proov,DC=domain'<br>
</code><br>
</script><br>
</expression><br>
<condition><br>
<script><br>
<code>givenName != null && familyName != null</code><br>
</script><br>
</condition><br>
</outbound><br>
</attribute><br>
...<br>
Thanks,<br>
Aivo Kuhlberg<br>
</p>
<br>
<hr>
<font face="Arial" color="Gray" size="2">Käesolev e-kiri võib sisaldada asutusesiseseks kasutamiseks tunnistatud teavet.<br>
This e-mail may contain information which is classified for official use.</font> <br>
<fieldset class="mimeAttachmentHeader"></fieldset> <br>
<pre>_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
evolveum.com evolveum.com/blog/
___________________________________________________
"Semper ID(e)M Vix."
</pre>
</div>
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="2">Käesolev e-kiri võib sisaldada asutusesiseseks kasutamiseks tunnistatud teavet.<br>
This e-mail may contain information which is classified for official use.</font>
</body>
</html>