<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Daniel,</p>
<p>this is actually part of what Mariano is trying to achieve. :-)</p>
<p>The inducement should look like this:</p>
<p>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</p>
<pre style="background-color:#ffffff;color:#000000;font-family:'Courier New';font-size:9,0pt;"><span style="background-color:#efefef;"><</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">inducement</span><span style="background-color:#efefef;">></span>
<span style="background-color:#efefef;"><</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">description</span><span style="background-color:#efefef;">></span>LDAP resource with implied group membership<span style="background-color:#efefef;"></</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">description</span><span style="background-color:#efefef;">></span>
<span style="background-color:#efefef;"><</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">construction</span><span style="background-color:#efefef;">></span>
<span style="color:#808080;font-style:italic;"> </span><span style="background-color:#efefef;"><</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">resourceRef </span><span style="color:#0000ff;background-color:#efefef;font-weight:bold;">oid</span><span style="color:#008000;background-color:#efefef;font-weight:bold;">="ebd0bf7b-7e80-4175-ba5e-4fd5de2ecd62" </span><span style="color:#0000ff;background-color:#efefef;font-weight:bold;">type</span><span style="color:#008000;background-color:#efefef;font-weight:bold;">="ResourceType"</span><span style="background-color:#efefef;">/></span>
<span style="color:#808080;font-style:italic;"> </span><span style="background-color:#efefef;"><</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">association</span><span style="background-color:#efefef;">></span>
<span style="background-color:#efefef;"><</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">ref</span><span style="background-color:#efefef;">></span>ri:groups<span style="background-color:#efefef;"></</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">ref</span><span style="background-color:#efefef;">></span>
<span style="background-color:#efefef;"><</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">outbound</span><span style="background-color:#efefef;">></span>
<span style="background-color:#efefef;"><</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">expression</span><span style="background-color:#efefef;">></span>
<meta http-equiv="content-type" content="text/html; charset=utf-8"><span style="color:#000080;background-color:#efefef;font-weight:bold;"><span style="background-color:#efefef;"> <</span><span style="color:#000080;background-color:#efefef;font-weight:bold;"></span>associationFromLink</span><span style="background-color:#efefef;">></span>
<span style="background-color:#efefef;"> <</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">projectionDiscriminator</span><span style="background-color:#efefef;">></span>
<span style="background-color:#efefef;"> <</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">kind</span><span style="background-color:#efefef;">></span>entitlement<span style="background-color:#efefef;"></</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">kind</span><span style="background-color:#efefef;">></span>
<span style="background-color:#efefef;"> <</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">intent</span><span style="background-color:#efefef;">>g</span>roup<span style="background-color:#efefef;"></</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">intent</span><span style="background-color:#efefef;">></span>
<span style="background-color:#efefef;"> </</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">projectionDiscriminator</span><span style="background-color:#efefef;">></span>
<span style="background-color:#efefef;"> </</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">associationFromLink</span><span style="background-color:#efefef;">></span>
<span style="background-color:#efefef;"></</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">expression</span><span style="background-color:#efefef;">></span>
<span style="background-color:#efefef;"></</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">outbound</span><span style="background-color:#efefef;">></span>
<span style="background-color:#efefef;"></</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">association</span><span style="background-color:#efefef;">></span>
<span style="background-color:#efefef;"> </</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">construction</span><span style="background-color:#efefef;">></span>
<span style="background-color:#efefef;"></</span><span style="color:#000080;background-color:#efefef;font-weight:bold;">inducement</span><span style="background-color:#efefef;">>
</span></pre><span style="background-color:#efefef;">But you need to use correct resource OID, association name (ri:groups?), and intent (group).</span>
<span style="background-color:#efefef;"></span>
<span style="background-color:#efefef;">You can have a look at the full example e.g. in samples\demo-generic synchronization\role-meta-responsibility-GenSync.xml.</span>
<span style="background-color:#efefef;"></span><span style="background-color:#efefef;"></span>
<span style="background-color:#efefef;">Best regards,</span>
<span style="background-color:#efefef;"></span><pre class="moz-signature" cols="72">Pavol Mederly
Software developer
evolveum.com
</pre><div class="moz-cite-prefix">On 06.09.2016 15:31, <a class="moz-txt-link-abbreviated" href="mailto:Daniel.Sommer@itconcepts.net">Daniel.Sommer@itconcepts.net</a> wrote:
</div><blockquote cite="mid:OF09E3C210.34A3E40F-ONC1258026.004A4A87-C1258026.004A4A89@itconcepts.net" type="cite"><font face="Default Sans Serif,Verdana,Arial,Helvetica,sans-serif" size="2">
<font face="Verdana, Arial, Helvetica, sans-serif">Hello,</font><div style="font-family: Verdana, Arial, Helvetica, sans-serif;">
</div><div style="font-family: Verdana, Arial, Helvetica, sans-serif;">
</div><div style="font-family: Verdana, Arial, Helvetica, sans-serif;">
i am able to assign an account in a resource. I can assign it using a role. </div>
<div style="font-family: Verdana, Arial, Helvetica, sans-serif;">I have also been able to establish synchronization of an entitlement as a group in the same resource.</div>
<div style="font-family: Verdana, Arial, Helvetica, sans-serif;">Now i want to associate the entitlement with a role, too.</div>
<div style="font-family: Verdana, Arial, Helvetica, sans-serif;">
</div>
<div style="font-family: Verdana, Arial, Helvetica, sans-serif;">I found an example where an inducement within a role was configured like this:</div>
<div><div style=""><font face="Verdana, Arial, Helvetica, sans-serif"><inducement id="1"></font>
</div><div style=""><font face="Verdana, Arial, Helvetica, sans-serif">
<construction></font></div><div style=""><font face="Verdana, Arial, Helvetica, sans-serif">
<resourceRef oid="ef2bc95b-76e0-48e2-86d6-3d4f02d3e1a2" type="c:ResourceType"><!-- LDAP... --></resourceRef></font>
</div><div style=""><font face="Verdana, Arial, Helvetica, sans-serif">
<kind>entitlement</kind></font>
</div><div style=""><font face="Verdana, Arial, Helvetica, sans-serif">
<intent>group</intent></font>
</div><div style=""><font face="Verdana, Arial, Helvetica, sans-serif">
</construction></font></div><div><font face="Verdana, Arial, Helvetica, sans-serif">
</inducement></font></div></div><div><font face="Verdana, Arial, Helvetica, sans-serif">
</font></div><div><font face="Verdana, Arial, Helvetica, sans-serif">
Therefor i have manually added the kind and intent tag. If i try to assign i get an error like: missing oid attribute.</font>
</div><div><font face="Verdana, Arial, Helvetica, sans-serif">Of course i can perfectly reproduce its problem - we need to specify which entitlement to assign by this role.</font>
</div><div><font face="Verdana, Arial, Helvetica, sans-serif">Am i right until now? How/where can i specify the groups/entitlements oid?</font>
</div><div><font face="Verdana, Arial, Helvetica, sans-serif">
</font>
</div><div><font face="Verdana, Arial, Helvetica, sans-serif">
</font>
</div><div><font face="Verdana, Arial, Helvetica, sans-serif">Best regards.</font>
</div></font>
<p><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);">Daniel Sommer
Office: +49 228 908733 0 </span></span><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);">| </span></span><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);">Fax: +49 228 908733 1</span></span><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);"> | Mobil: +49 176 162086 79</span></span></p>
<p><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);">ITConcepts Professional GmbH - In den Dauen 6 - DE 53117 Bonn</span></span></p>
<p><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);">Website </span></span><span style="color: rgb(153, 153, 153);"><a moz-do-not-send="true" href="http://www.itconcepts.net"><span style="font-family: Arial;">www.itconcepts.net</span></a>
<a moz-do-not-send="true" href="http://www.itconcepts.net/"><img src="cid:part2.5B34467D.70A37F12@evolveum.com" alt="" border="0"></a> <a moz-do-not-send="true" href="http://www.itconcepts.net/index.php/about-cognitum"><img src="cid:part4.A4803165.BD05706D@evolveum.com" alt="" border="0"></a>
Besuchen Sie uns auch auf <a moz-do-not-send="true" href="http://www.xing.com/companies/itconceptsprofessionalgmbh/updates"><img src="cid:part6.8D9E56F6.6836F999@evolveum.com" alt="" border="0"></a> <a moz-do-not-send="true" href="http://www.linkedin.com/company/itconcepts"><img src="cid:part8.54D0C7B6.1A855D29@evolveum.com" alt="" border="0"></a></span></p>
<p><span style="font-size: 12px;"><span style="color: rgb(169, 169, 169);">Events mit ITConcepts
10.-12. Oktober: SailPoint Navigate in Berlin. Mehr Infos </span><a moz-do-not-send="true" href="http://www.itconcepts.de/index.php/veranstaltungen/details/86-sailpoint-navigate"><span style="color: rgb(169, 169, 169);">hier</span></a><span style="color: rgb(169, 169, 169);">.
13. Oktober: Ping IDENTIFY in Frankfurt. <font face="Arial"><font face="Arial"><font face="Arial">Mehr Infos </font></font></font></span><a moz-do-not-send="true" href="http://www.itconcepts.de/index.php/veranstaltungen/details/89-ping-identify"><span style="color: rgb(169, 169, 169);"><font face="Arial"><font face="Arial"><font face="Arial">hier</font></font></font></span></a><span style="color: rgb(169, 169, 169);"><font face="Arial"><font face="Arial"><font face="Arial">.</font></font></font>
17. Oktober: <font face="Arial"><font face="Arial"><font face="Arial">Internationaler Automobil Kongress in Wolfsburg. Mehr Infos </font></font></font></span><a moz-do-not-send="true" href="http://www.itconcepts.de/index.php/veranstaltungen/details/88-internationaler-automobil-kongress"><span style="color: rgb(169, 169, 169);"><font face="Arial"><font face="Arial"><font face="Arial">hier</font></font></font></span></a><span style="color: rgb(169, 169, 169);"><font face="Arial"><font face="Arial"><font face="Arial">.</font></font></font>
18.- 20. Oktober: it-sa, IT Security Messe in Nürnberg, Mehr Infos </span><a moz-do-not-send="true" href="http://www.itconcepts.de/index.php/veranstaltungen/details/84-it-sa-2016"><span style="color: rgb(169, 169, 169);">hier</span></a><span style="color: rgb(169, 169, 169);">.
18.- 20. Oktober: IZB in Wolfsburg, <font face="Arial"><font face="Arial"><font face="Arial">Mehr Infos </font></font></font></span><a moz-do-not-send="true" href="http://www.itconcepts.de/index.php/veranstaltungen/details/87-izb-internationale-zuliefererboerse"><span style="color: rgb(169, 169, 169);"><font face="Arial"><font face="Arial"><font face="Arial">hier</font></font></font></span></a><span style="color: rgb(169, 169, 169);">.
16.- 17. November: BMC Exchange in Mainz .<font face="Arial"><font face="Arial"><font face="Arial">Mehr Infos </font></font></font></span><a moz-do-not-send="true" href="http://www.itconcepts.de/index.php/veranstaltungen/details/53-bmc-exchange-2016"><span style="color: rgb(169, 169, 169);"><font face="Arial"><font face="Arial"><font face="Arial">hier</font></font></font></span></a><span style="color: rgb(169, 169, 169);"><font face="Arial"><font face="Arial"><font face="Arial">.</font></font></font></span></span></p>
<p><span style="color: rgb(169, 169, 169);"><span style="font-family: Arial;"><span style="font-size: small;">Trainings von ITConcepts</span></span>
17. -21. Oktober: Öffentliches Training Dell One Identity Manager 6.x - Basisschulung (</span><a moz-do-not-send="true" href="http://tp://www.itconcepts.de/index.php/iam/dell-one-identity-manager-basisschulung"><span style="color: rgb(0, 0, 255);">Kursinhalt</span></a><span style="color: rgb(169, 169, 169);">)</span>
<span style="font-size: x-small;"><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);">ITConcepts Professional GmbH Gf.: Sven Moog, Sitz Bonn, AG Bonn HRB 12947 - Ust-Id Nr: DE211482933
ITConcepts Automotive GmbH Gf.: Sven Moog, Sitz Wolfsburg, AG Braunschweig HRB 204188 - Ust-Id Nr: DE223888748
ITConcepts Operations GmbH Gf.: Sven Moog, Sitz Bonn, AG Bonn HRB 15454 - St.-Nr: 205/5726/0602</span></span></span></p>
<p><span style="font-size: x-small;"><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);">Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind
oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail.
Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser E-Mail sind nicht gestattet.</span></span></span></p>
<p><span style="font-size: x-small;"><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);">This e-mail may contain confidential and/or privileged information. If you are not the intended recipient
(or have received this e-mail in error) please notify the sender immediately and destroy this e-mail.</span>
<span style="color: rgb(153, 153, 153);">Any unauthorised copying, disclosure or distribution of the material in this e-mail is strictly forbidden.</span></span></span></p>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
</body></html>