<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <p>Hi,</p>
    <p>schema handling looks ok for me - mapping whatever focus to
      account. Btw. which connector are you using?<br>
    </p>
    <p>But - how are you provisioning this? Which role are you assigning
      to your Service?</p>
    <p>I need to see the inducement part of the role...</p>
    <p>Ivan<br>
    </p>
    <br>
    <div class="moz-cite-prefix">On 11/16/2016 03:11 PM, Jiri Brom
      wrote:<br>
    </div>
    <blockquote
cite="mid:CAM4=MfqhJA5OywNrMYFJCsRZDH65t2stv44E40fvpw3BmoKEyQ@mail.gmail.com"
      type="cite">
      <div dir="ltr">Hi,
        <div><br>
        </div>
        <div>Just for testing I tried to map $focus/identifier as Source
          in the existing LDAP connector in online demo. In schema
          handling called "LDAP project groups" it was working. The main
          difference from my schema handling is that it has __GROUP__
          objectClass. Is it possible that attributes from Org, Role or
          Service can be mapped only to __GROUP__  object class? </div>
        <div><br>
        </div>
        <div>My schema handling is following:</div>
        <div><br>
        </div>
        <div><schemaHandling></div>
        <div>      <objectType></div>
        <div>         <kind>account</kind></div>
        <div>         <default>true</default></div>
        <div>       
           <objectClass>ri:AccountObjectClass</objectClass></div>
        <div>         <attribute></div>
        <div>            <c:ref>icfs:name</c:ref></div>
        <div>            <tolerant>true</tolerant></div>
        <div>           
          <exclusiveStrong>false</exclusiveStrong></div>
        <div>            <outbound></div>
        <div>             
           <authoritative>true</authoritative></div>
        <div>               <exclusive>false</exclusive></div>
        <div>               <strength>normal</strength></div>
        <div>               <source></div>
        <div>                  <c:path>$focus/name</c:path></div>
        <div>               </source></div>
        <div>            </outbound></div>
        <div>         </attribute></div>
        <div>         <attribute></div>
        <div>            <c:ref>ri:identifier</c:ref></div>
        <div>            <tolerant>true</tolerant></div>
        <div>           
          <exclusiveStrong>false</exclusiveStrong></div>
        <div>            <outbound></div>
        <div>             
           <authoritative>true</authoritative></div>
        <div>               <exclusive>false</exclusive></div>
        <div>               <strength>normal</strength></div>
        <div>               <source></div>
        <div>                 
          <c:path>$focus/identifier</c:path></div>
        <div>               </source></div>
        <div>            </outbound></div>
        <div>         </attribute></div>
        <div>      </objectType></div>
        <div>   </schemaHandling> </div>
        <div><br>
        </div>
        <div><br>
        </div>
        <div>Thank you for your answers,</div>
        <div><br>
        </div>
        <div>Jiri</div>
        <div><br>
        </div>
      </div>
      <div class="gmail_extra"><br clear="all">
        <div>
          <div class="gmail_signature" data-smartmail="gmail_signature">
            <div dir="ltr">Jiří Brom<br>
              <br>
              e-mail: <a moz-do-not-send="true"
                href="mailto:bromjiri@gmail.com" target="_blank">bromjiri@gmail.com</a><br>
              CZ: +420723860707<br>
              AT: +436607144324</div>
          </div>
        </div>
        <br>
        <div class="gmail_quote">On Wed, Nov 16, 2016 at 1:33 PM, Ivan
          Noris <span dir="ltr"><<a moz-do-not-send="true"
              href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div bgcolor="#FFFFFF" text="#000000">
              <p>Hi,</p>
              <p>the __ACCOUNT__ is the default, yes.</p>
              <p>I don't know which connector are you using, but in
                general there is no problem for midPoint to create
                accounts for organizations or roles; it's just not very
                common. Normally you sould use <objectClass> in
                the schema handling to tell the connector which kind of
                the object it should create.</p>
              <p>Could you share the resource of at least part of it -
                schema handling?</p>
              <span class="HOEnZb"><font color="#888888">
                  <p>Ivan<br>
                  </p>
                </font></span>
              <div>
                <div class="h5"> <br>
                  <div class="m_-2501243291815147705moz-cite-prefix">On
                    11/16/2016 01:07 PM, Jiri Brom wrote:<br>
                  </div>
                  <blockquote type="cite">
                    <div dir="ltr">Hi,
                      <div><br>
                      </div>
                      <div>In my case when I try to map for instance
                        "$focus/tenant", which is an attribute of
                        OrgType (<a moz-do-not-send="true"
                          href="https://wiki.evolveum.com/display/midPoint/OrgType"
                          target="_blank">https://wiki.evolveum.com/<wbr>display/midPoint/OrgType</a>)
                        it also doesn't work. Still the same error "No
                        definition for 'tenant' in user". I think I do
                        some stupid mistake in setup which allows me to
                        provision User attributes only. Do you use some
                        special configuration when working with OrgType
                        or RoleType? E.g. Kind, Intent, etc..</div>
                      <div><br>
                      </div>
                      <div>Or is it possible that the problem is in the
                        ObjectClass defined in my connector schema? As I
                        understand the Connector Development Guide, then
                        __ACOUNT__ is the default one (I am using that
                        one). Do I have to use some other ObjectClass
                        when mapping Role, Org or other attributes?</div>
                      <div><br>
                      </div>
                      <div>Thank you for your answers,</div>
                      <div><br>
                      </div>
                      <div>Jiri</div>
                    </div>
                    <div class="gmail_extra"><br clear="all">
                      <div>
                        <div
                          class="m_-2501243291815147705gmail_signature"
                          data-smartmail="gmail_signature">
                          <div dir="ltr">Jiří Brom<br>
                            <br>
                            e-mail: <a moz-do-not-send="true"
                              href="mailto:bromjiri@gmail.com"
                              target="_blank">bromjiri@gmail.com</a><br>
                            CZ: <a moz-do-not-send="true"
                              href="tel:%2B420723860707"
                              value="+420723860707" target="_blank">+420723860707</a><br>
                            AT: <a moz-do-not-send="true"
                              href="tel:%2B436607144324"
                              value="+436607144324" target="_blank">+436607144324</a></div>
                        </div>
                      </div>
                      <br>
                      <div class="gmail_quote">On Wed, Nov 16, 2016 at
                        12:57 PM, Pavol Mederly <span dir="ltr"><<a
                            moz-do-not-send="true"
                            href="mailto:mederly@evolveum.com"
                            target="_blank">mederly@evolveum.com</a>></span>
                        wrote:<br>
                        <blockquote class="gmail_quote" style="margin:0
                          0 0 .8ex;border-left:1px #ccc
                          solid;padding-left:1ex">
                          <div bgcolor="#FFFFFF" text="#000000">
                            <p>The wizard could really have a problem in
                              this respect. We haven't updated it after
                              Services were introduced, as far as I
                              know.</p>
                            <span class="m_-2501243291815147705HOEnZb"><font
                                color="#888888">
                                <pre class="m_-2501243291815147705m_6616648811823999767moz-signature" cols="72">Pavol Mederly
Software developer
<a moz-do-not-send="true" href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre>
                              </font></span>
                            <div>
                              <div class="m_-2501243291815147705h5">
                                <div
                                  class="m_-2501243291815147705m_6616648811823999767moz-cite-prefix">On
                                  16.11.2016 12:42, Ivan Noris wrote:<br>
                                </div>
                                <blockquote type="cite">
                                  <p>Hi Jiri,</p>
                                  <p>I have not used Service, but for
                                    provisioning objects for Roles /
                                    Organizations I'm using $focus and
                                    it should be the same for Service.</p>
                                  <p>Maybe the resource wizard has an
                                    issue with Service? Just thinking.
                                    But using XML editor/upload you
                                    should be able to access the
                                    attributes as $focus/identifier etc.</p>
                                  <p>Let us know please anyway.</p>
                                  <p>Regards,</p>
                                  <p>Ivan<br>
                                  </p>
                                  <br>
                                  <div
                                    class="m_-2501243291815147705m_6616648811823999767moz-cite-prefix">On
                                    11/16/2016 12:29 PM, Jiri Brom
                                    wrote:<br>
                                  </div>
                                  <blockquote type="cite">
                                    <div dir="ltr">
                                      <div>Hi all,</div>
                                      <div><br>
                                      </div>
                                      <div>I have a problem with mapping
                                        of Service attributes to a
                                        connector in Schema handling. </div>
                                      <div>I've successfully implemented
                                        a midPoint connector which maps
                                        User attributes to my resource.
                                        Now I want to do the same but
                                        with Service attributes.</div>
                                      <div><br>
                                      </div>
                                      <div>In case of User attributes I
                                        can simply define Outbound
                                        mapping (e.g. "name",
                                        "givenName", "familyName") but I
                                        can't figure out how to access
                                        Service attributes (e.g.
                                        "identifier", "url") in the same
                                        way.</div>
                                      <div><br>
                                      </div>
                                      <div>I know I should probably use
                                        "$focus/" variable but the
                                        resource wizard keeps notifying
                                        me "No definition for
                                        'identifier' in user". </div>
                                      <div>Is there a way to simply
                                        access the Service attributes? </div>
                                      <div><br>
                                      </div>
                                      <div>Thank you very much,</div>
                                      <div><br>
                                      </div>
                                      <div>Jiri</div>
                                      <div>
                                        <div
                                          class="m_-2501243291815147705m_6616648811823999767gmail_signature">
                                          <div dir="ltr"><br>
                                            <br>
                                            e-mail: <a
                                              moz-do-not-send="true"
                                              href="mailto:bromjiri@gmail.com"
                                              target="_blank">bromjiri@gmail.com</a><br>
                                            CZ: <a
                                              moz-do-not-send="true"
                                              href="tel:%2B420723860707"
                                              value="+420723860707"
                                              target="_blank">+420723860707</a><br>
                                            <br>
                                          </div>
                                        </div>
                                      </div>
                                    </div>
                                    <br>
                                    <fieldset
                                      class="m_-2501243291815147705m_6616648811823999767mimeAttachmentHeader"></fieldset>
                                    <br>
                                    <pre>______________________________<wbr>_________________
midPoint mailing list
<a moz-do-not-send="true" class="m_-2501243291815147705m_6616648811823999767moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="m_-2501243291815147705m_6616648811823999767moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a>
</pre>
      </blockquote>
      

      <pre class="m_-2501243291815147705m_6616648811823999767moz-signature" cols="72">-- 
Ivan Noris
Senior Identity Engineer
<a moz-do-not-send="true" href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre>
      

      <fieldset class="m_-2501243291815147705m_6616648811823999767mimeAttachmentHeader"></fieldset>
      

      <pre>______________________________<wbr>_________________
midPoint mailing list
<a moz-do-not-send="true" class="m_-2501243291815147705m_6616648811823999767moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="m_-2501243291815147705m_6616648811823999767moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a>
</pre>
    </blockquote>
    

  </div></div></div>


______________________________<wbr>_________________

midPoint mailing list

<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>

<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a>


</blockquote></div>
</div>


<fieldset class="m_-2501243291815147705mimeAttachmentHeader"></fieldset>
<pre>______________________________<wbr>_________________
midPoint mailing list
<a moz-do-not-send="true" class="m_-2501243291815147705moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="m_-2501243291815147705moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a>
</pre>

</blockquote>
<pre class="m_-2501243291815147705moz-signature" cols="72">-- 
Ivan Noris
Senior Identity Engineer
<a moz-do-not-send="true" href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre></div></div></div>
______________________________<wbr>_________________

midPoint mailing list

<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>

<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a>


</blockquote></div>
</div>


<fieldset class="mimeAttachmentHeader"></fieldset>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>

</blockquote>
<pre class="moz-signature" cols="72">-- 
Ivan Noris
Senior Identity Engineer
evolveum.com
</pre></body></html>