<html><body><div style="font-family: times new roman, new york, times, serif; font-size: 12pt; color: #000000"><div>Rodrigo,<br></div><div><br></div><div>use of workflows in midPoint is currently limited to approving requested changes. So, today there's no way of starting a workflow that would present a user a work item like "hey you, please do this and then click 'Done'". We plan to implement a "manual provisioning" but it requires a nontrivial amount of effort, see <a href="https://jira.evolveum.com/browse/MID-2457">https://jira.evolveum.com/browse/MID-2457</a>.<br></div><div><br></div><div>But maybe there's a hack possible. Workflows can be used to approve a change. For example, midPoint is able to approve a role assignment addition (out of the box). Or an attribute change (with some custom coding). </div><div><br></div><div>If I understand your situation correctly, maybe you could do it like this:<br></div><div><ol><li>You have a resource X that requires manual intervention by an administrator in order to assign role X1 to an account on this resource.<br></li><li>So, you can create a midPoint role RoleX1, with approver defined to be the resource administrator.<br></li><li>If someone assigns RoleX1 to a midPoint user, an approval workflow process is started, notifying the resource administrator that he has to "approve" assignment of RoleX1 to midPoint user.<br></li><li>At this point, he knows he has to manually assign role X1 on X to user's account.<br></li><li>So he does it, and marks the assignment as "Approved".<br></li><li>The assignment of RoleX1 is then added to the user, so he knows that everything is done (in particular that the role X1 on resource X was added to him).<br></li></ol><div>Does this make sense to you?<br></div><div><br></div><div>Best regards,<br></div><div>Pavol<br></div></div><div><br></div><div><br></div><div><br></div><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>"Rodrigo Yanis" <ryanis@identicum.com><br><b>To: </b>"midPoint General Discussion" <midpoint@lists.evolveum.com><br><b>Sent: </b>Friday, August 19, 2016 8:48:20 PM<br><b>Subject: </b>Re: [midPoint] - Manual tasks notifications<br><div><br></div><div dir="ltr">Bringing this up again - Do you know of a way for Midpoint to, aside from sending that notification upon an attribute change, to also trigger an internal Workflow that would allow us to keep track of the manual workload? In this scenario, the user gets the notification for the manual task, on parallel, a workflow is triggered to trace the start of a manual task, and would be manually updated by the user throughout the change process.<div><br></div><div>Is this "Workflow" idea somewhat plausible? </div><div><br></div><div>Thanks a lot. <br></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><br></div><div dir="ltr"><span style="font-family: arial,helvetica,sans-serif;" data-mce-style="font-family: arial,helvetica,sans-serif;" face="arial, helvetica, sans-serif"><b>Rodrigo Yanis.</b><br><img src="http://www.identicum.com/img/favicon.ico">Identicum S.A.<br></span>Jorge Newbery 3226<br>Tel: +54 (11) 4824-9971<span style="font-family: arial,helvetica,sans-serif;" data-mce-style="font-family: arial,helvetica,sans-serif;" face="arial, helvetica, sans-serif"><br><a href="mailto:ryanis@identicum.com" target="_blank"><span style="color: #0b5394;" data-mce-style="color: #0b5394;" color="#0b5394">ryanis@identicum.com</span></a><br><a href="http://www.identicum.com/" target="_blank"><span style="color: #0b5394;" data-mce-style="color: #0b5394;" color="#0b5394">www.identicum.com</span></a></span><br data-mce-bogus="1"></div></div></div></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote">2016-08-19 15:32 GMT-03:00 Rodrigo Yanis <span dir="ltr"><<a href="mailto:ryanis@identicum.com" target="_blank">ryanis@identicum.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Excellent. We'll surely try this out.<div><br></div><div>Thanks guys.</div></div><div class="gmail_extra"><span class=""><br clear="all"><div><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><br></div><div dir="ltr"><span style="font-family: arial,helvetica,sans-serif;" data-mce-style="font-family: arial,helvetica,sans-serif;" face="arial, helvetica, sans-serif"><b>Rodrigo Yanis.</b><br><img src="http://www.identicum.com/img/favicon.ico">Identicum S.A.<br></span>Jorge Newbery 3226<br>Tel: +54 (11) 4824-9971<span style="font-family: arial,helvetica,sans-serif;" data-mce-style="font-family: arial,helvetica,sans-serif;" face="arial, helvetica, sans-serif"><br><a href="mailto:ryanis@identicum.com" target="_blank"><span style="color: #0b5394;" data-mce-style="color: #0b5394;" color="#0b5394">ryanis@identicum.com</span></a><br><a href="http://www.identicum.com/" target="_blank"><span style="color: #0b5394;" data-mce-style="color: #0b5394;" color="#0b5394">www.identicum.com</span></a></span><br data-mce-bogus="1"></div></div></div></div></div></div></div></div></div></div></div>
<br></span><div><div class="h5"><div class="gmail_quote">2016-08-19 15:29 GMT-03:00 Jason Everling <span dir="ltr"><<a href="mailto:jeverling@bshp.edu" target="_blank">jeverling@bshp.edu</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">I can say that the workaround works quite well! Have been using it for almost a year now in production without issue and without having any "missed" notifications not going out.<div><br></div><div>Thanks Pavol for adding that functionality sometime ago as it has proved invaluable for us!</div></div><div class="gmail_extra"><br clear="all"><div><div><div dir="ltr">JASON</div></div></div><div><div>
<br><div class="gmail_quote">On Fri, Aug 19, 2016 at 1:11 PM, Pavol Mederly <span dir="ltr"><<a href="mailto:pavol.mederly@evolveum.com" target="_blank">pavol.mederly@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-family:times new roman,new york,times,serif;font-size:12pt;color:#000000"><div>Hello Rodrigo,<br></div><div><br></div><div>please see <a href="https://jira.evolveum.com/browse/MID-2237" target="_blank">https://jira.evolveum.com/browse/MID-2237</a> for a discussion on this requirement. Although it is not implemented yet, there is a simple workaround described there. It is based on using <em>event.isRelatedToItem</em> method.<br></div><div><br></div><div>Best regards,<br></div><div>Pavol<br></div><div><br></div><hr><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt"><b>From: </b>"Rodrigo Yanis" <<a href="mailto:ryanis@identicum.com" target="_blank">ryanis@identicum.com</a>><br><b>To: </b><a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a><br><b>Sent: </b>Friday, August 19, 2016 7:20:11 PM<br><b>Subject: </b>[midPoint] - Manual tasks notifications<div><div><br><div><br></div><div dir="ltr">Hello everyone,<div><br></div><div>We have the need to push a notification <span style="text-decoration:underline">only</span> when a particular attribute is changed in a user in midPoint. This attribute would be linked to a set of roles that the user would inherit in midPoint only, hence the need to inform a sysadmin to perform a manual role redefinition in connected applications.</div><div><br></div><div>Is it possible to trigger a notification like this? Should this be done in the context of a midPoint resource?<br clear="all"><div><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><br></div><div>Thank you in advance!</div><div dir="ltr"><br></div><div dir="ltr"><span style="font-family:arial,helvetica,sans-serif"><b>Rodrigo Yanis.</b><br><img src="http://www.identicum.com/img/favicon.ico">Identicum S.A.<br></span>Jorge Newbery 3226<br>Tel: <a href="tel:%2B54%20%2811%29%204824-9971" target="_blank">+54 (11) 4824-9971</a><span style="font-family:arial,helvetica,sans-serif"><br><a href="mailto:ryanis@identicum.com" target="_blank"><span style="color:#0b5394">ryanis@identicum.com</span></a><br><a href="http://www.identicum.com/" target="_blank"><span style="color:#0b5394">www.identicum.com</span></a></span><br></div></div></div></div></div></div></div></div></div></div></div>
</div></div>
<br></div></div>_______________________________________________<br>midPoint mailing list<br><a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br><a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br></div><div><br></div></div></div><br>_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br></div></div></div>
<br>
<span style="font-size: small;" data-mce-style="font-size: small;" size="2"><br><div><br></div>CONFIDENTIALITY NOTICE:<br>This e-mail together with any attachments is proprietary and confidential; intended for only the recipient(s) named above and may contain information that is privileged. You should not retain, copy or use this e-mail or any attachments for any purpose, or disclose all or any part of the contents to any person. Any views or opinions expressed in this e-mail are those of the author and do not represent those of the Baptist School of Health Professions. If you have received this e-mail in error, or are not the named recipient(s), you are hereby notified that any review, dissemination, distribution or copying of this communication is prohibited by the sender and to do so might constitute a violation of the Electronic Communications Privacy Act, 18 U.S.C. section 2510-2521. Please immediately notify the sender and delete this e-mail and any attachments from your computer. </span><br><div><br></div>_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br></div></div></div>
</blockquote></div><br></div>
<br>_______________________________________________<br>midPoint mailing list<br>midPoint@lists.evolveum.com<br>http://lists.evolveum.com/mailman/listinfo/midpoint<br></div><div><br></div></div></body></html>