<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Hi Martin,</p>
<p>could you please share one of the roles which you assign for AD?
Or at least mappings to show how you compute associations
(associationTargetSearch)?<br>
</p>
Thanks,<br>
Ivan<br>
<br>
<div class="moz-cite-prefix">On 09/05/2016 04:43 PM, Martin Herbert
wrote:<br>
</div>
<blockquote
cite="mid:5FDFA883-BA59-476A-A1BE-30037D132C88@tahzoo.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:Calibri;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Calibri;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:Calibri;}
@page WordSection1
{size:595.0pt 842.0pt;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt" lang="EN-GB">Hi
Guys,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt" lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt" lang="EN-GB">We’ve
successfully implemented Midpoint in to our production
environment with multiple Active Directory domains.
However, when user accounts are updated for any piece of
information (password, assignment or otherwise) midpoint
automatically appears to update all shadow object
associations on the AD environment.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt" lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt" lang="EN-GB">This
is causing us a fair amount of issues, as a number of our
users have in excess of 30 assignments with various AD
groups and any level of change takes a number of minutes.
Even a password change takes a long time to complete. Is
there a way to stop this update of all
assignments/projections with every change and just handle
that during a re-synchronise task say at the end of each
day?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt" lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt" lang="EN-GB">Thanks<o:p></o:p></span></p>
</div>
<div
style="mso-line-height-rule:exactly;-webkit-text-size-adjust:100%;white-space:normal;"><br>
<table
style="background-color:#FFFFFF;border-collapse:collapse;font-size:0;line-height:16.88px;"
cellpadding="0" cellspacing="0" border="0">
<tbody>
<tr>
<td style="vertical-align:middle;" align="left">
<table style="border-collapse:collapse;font-size:0;"
cellpadding="0" cellspacing="0" border="0">
<tbody>
<tr>
<td style="border-top:none;border-right:solid 2px
#124A7D;border-bottom:none;border-left:none;padding:0 10px 0
0;vertical-align:middle;line-height:normal;"
align="left"><a moz-do-not-send="true"
href="http://www.tahzoo.com" target="_blank"
id="LPlnk689713" style="text-decoration:none;"><img
src="cid:part1.4D356892.A93AED81@evolveum.com" alt=""
style="min-width:96px;font-size:0;"
border="0" height="51" width="96"></a></td>
<td style="padding:10px 0 10px
10px;vertical-align:top;" align="left">
<table
style="border-collapse:collapse;font-size:0;"
cellpadding="0" cellspacing="0" border="0">
<tbody>
<tr>
<td style="vertical-align:top;"
align="left">
<table
style="border-collapse:collapse;font-size:13.5px;color:#606060;font-style:normal;font-weight:bold;text-decoration:none;"
cellpadding="0" cellspacing="0"
border="0">
<tbody>
<tr>
<td
style="vertical-align:top;text-align:left;font-family:Century
Gothic,CenturyGothic,AppleGothic,sans-serif;" align="left">Martin
Herbert</td>
</tr>
<tr
style="font-size:12px;color:#808080;line-height:15px;">
<td
style="vertical-align:top;text-align:left;font-family:Century
Gothic,CenturyGothic,AppleGothic,sans-serif;" align="left">Hosting
Manager / Head of IT &
Hosting Services</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr
style="line-height:15px;white-space:nowrap;">
<td style="padding:5px 0
10px;vertical-align:top;" align="left">
<table
style="border-collapse:collapse;font-size:0;"
cellpadding="0" cellspacing="0"
border="0">
<tbody>
<tr>
<td style="vertical-align:top;"
align="left">
<table
style="border-collapse:collapse;font-size:12px;color:#124A7D;font-style:normal;font-weight:normal;text-decoration:none;"
cellpadding="0"
cellspacing="0" border="0">
<tbody>
<tr>
<td
style="vertical-align:top;text-align:left;font-family:Century
Gothic,CenturyGothic,AppleGothic,sans-serif;font-weight:bold;"
align="left">M: </td>
<td
style="vertical-align:top;text-align:left;font-family:Century
Gothic,CenturyGothic,AppleGothic,sans-serif;" align="left"><a
moz-do-not-send="true"
href="tel:+44%207862%20993%20003" target="_blank" id="LPlnk689713"
style="color:#808080;text-decoration:none;"><strong
style="font-weight:normal;">+44 7862 993 003</strong></a></td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td style="vertical-align:top;"
align="left">
<table
style="border-collapse:collapse;font-size:12px;color:#124A7D;font-style:normal;font-weight:normal;text-decoration:none;"
cellpadding="0"
cellspacing="0" border="0">
<tbody>
<tr>
<td
style="vertical-align:top;text-align:left;font-family:Century
Gothic,CenturyGothic,AppleGothic,sans-serif;font-weight:bold;"
align="left">E: </td>
<td
style="vertical-align:top;text-align:left;font-family:Century
Gothic,CenturyGothic,AppleGothic,sans-serif;" align="left"><a
moz-do-not-send="true"
href="mailto:martinh@tahzoo.com" target="_blank" id="LPlnk689713"
style="color:#808080;text-decoration:none;"><strong
style="font-weight:normal;">martinh@tahzoo.com</strong></a></td>
<td
style="vertical-align:top;text-align:left;color:#808080;font-family:Century
Gothic,CenturyGothic,AppleGothic,sans-serif;" align="left"> | </td>
<td
style="vertical-align:top;text-align:left;font-family:Century
Gothic,CenturyGothic,AppleGothic,sans-serif;font-weight:bold;"
align="left">W: </td>
<td
style="vertical-align:top;text-align:left;font-family:Century
Gothic,CenturyGothic,AppleGothic,sans-serif;" align="left"><a
moz-do-not-send="true"
href="http://www.tahzoo.com" target="_blank" id="LPlnk689713"
style="color:#808080;text-decoration:none;"><strong
style="font-weight:normal;">www.tahzoo.com</strong></a></td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td style="vertical-align:top;"
align="left">
<table
style="border-collapse:collapse;font-size:12px;color:#124A7D;font-style:normal;font-weight:normal;text-decoration:none;"
cellpadding="0"
cellspacing="0" border="0">
<tbody>
<tr>
<td
style="vertical-align:top;text-align:left;font-family:Century
Gothic,CenturyGothic,AppleGothic,sans-serif;font-weight:bold;"
align="left">A: </td>
<td
style="vertical-align:top;text-align:left;font-family:Century
Gothic,CenturyGothic,AppleGothic,sans-serif;" align="left"><a
moz-do-not-send="true"
href="https://www.google.com/maps/place/399+Silbury+Blvd,+Milton+Keynes+MK9+2AH,+UK/@52.0414531,-0.7670066,17z/data=%213m1%214b1%214m5%213m4%211s0x4877aa98b50bb921:0xef39de0bd21f30c6%218m2%213d52.0414531%214d-0.7648179"
target="_blank"
id="LPlnk689713"
style="color:#808080;text-decoration:none;"><strong
style="font-weight:normal;">399 Silbury Blvd, Milton Keynes, MK9 2AH, </strong></a></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr style="line-height:normal;">
<td style="vertical-align:top;"
align="left"><map
id="map_40028665-ebdd-4f8a-b7be-08ed275bf6c2"
name="map_40028665-ebdd-4f8a-b7be-08ed275bf6c2">
<area shape="rect" coords="0,0,16,16"
href="https://www.linkedin.com/company/tahzoo" alt="LinkedIn"
title="LinkedIn" target="_blank">
<area shape="rect" coords="19,0,35,16"
href="skype:live:mherbert84?chat"
alt="Skype" title="Skype"
target="_blank">
<area shape="rect" coords="38,0,54,16"
href="http://www.twitter.com/Tahzoo"
alt="Twitter" title="Twitter"
target="_blank">
</map>
<img
usemap="#map_40028665-ebdd-4f8a-b7be-08ed275bf6c2"
src="cid:part7.974573FA.9D5EDAD3@evolveum.com" alt=""
style="min-width:57px;font-size:0;"
border="0" height="16" width="57"></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ivan Noris
Senior Identity Engineer
evolveum.com
</pre>
</body>
</html>