<div dir="ltr">Hi,<div><br></div><div>Just for testing I tried to map $focus/identifier as Source in the existing LDAP connector in online demo. In schema handling called "LDAP project groups" it was working. The main difference from my schema handling is that it has __GROUP__ objectClass. Is it possible that attributes from Org, Role or Service can be mapped only to __GROUP__  object class? </div><div><br></div><div>My schema handling is following:</div><div><br></div><div><schemaHandling></div><div>      <objectType></div><div>         <kind>account</kind></div><div>         <default>true</default></div><div>         <objectClass>ri:AccountObjectClass</objectClass></div><div>         <attribute></div><div>            <c:ref>icfs:name</c:ref></div><div>            <tolerant>true</tolerant></div><div>            <exclusiveStrong>false</exclusiveStrong></div><div>            <outbound></div><div>               <authoritative>true</authoritative></div><div>               <exclusive>false</exclusive></div><div>               <strength>normal</strength></div><div>               <source></div><div>                  <c:path>$focus/name</c:path></div><div>               </source></div><div>            </outbound></div><div>         </attribute></div><div>         <attribute></div><div>            <c:ref>ri:identifier</c:ref></div><div>            <tolerant>true</tolerant></div><div>            <exclusiveStrong>false</exclusiveStrong></div><div>            <outbound></div><div>               <authoritative>true</authoritative></div><div>               <exclusive>false</exclusive></div><div>               <strength>normal</strength></div><div>               <source></div><div>                  <c:path>$focus/identifier</c:path></div><div>               </source></div><div>            </outbound></div><div>         </attribute></div><div>      </objectType></div><div>   </schemaHandling> </div><div><br></div><div><br></div><div>Thank you for your answers,</div><div><br></div><div>Jiri</div><div><br></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr">Jiří Brom<br><br>e-mail: <a href="mailto:bromjiri@gmail.com" target="_blank">bromjiri@gmail.com</a><br>CZ: +420723860707<br>AT: +436607144324</div></div></div>
<br><div class="gmail_quote">On Wed, Nov 16, 2016 at 1:33 PM, Ivan Noris <span dir="ltr"><<a href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
  
    
  
  <div bgcolor="#FFFFFF" text="#000000">
    <p>Hi,</p>
    <p>the __ACCOUNT__ is the default, yes.</p>
    <p>I don't know which connector are you using, but in general there
      is no problem for midPoint to create accounts for organizations or
      roles; it's just not very common. Normally you sould use
      <objectClass> in the schema handling to tell the connector
      which kind of the object it should create.</p>
    <p>Could you share the resource of at least part of it - schema
      handling?</p><span class="HOEnZb"><font color="#888888">
    <p>Ivan<br>
    </p></font></span><div><div class="h5">
    <br>
    <div class="m_-2501243291815147705moz-cite-prefix">On 11/16/2016 01:07 PM, Jiri Brom
      wrote:<br>
    </div>
    <blockquote type="cite">
      <div dir="ltr">Hi,
        <div><br>
        </div>
        <div>In my case when I try to map for instance "$focus/tenant",
          which is an attribute of OrgType (<a href="https://wiki.evolveum.com/display/midPoint/OrgType" target="_blank">https://wiki.evolveum.com/<wbr>display/midPoint/OrgType</a>)
          it also doesn't work. Still the same error "No definition for
          'tenant' in user". I think I do some stupid mistake in setup
          which allows me to provision User attributes only. Do you use
          some special configuration when working with OrgType or
          RoleType? E.g. Kind, Intent, etc..</div>
        <div><br>
        </div>
        <div>Or is it possible that the problem is in the ObjectClass
          defined in my connector schema? As I understand the Connector
          Development Guide, then __ACOUNT__ is the default one (I am
          using that one). Do I have to use some other ObjectClass when
          mapping Role, Org or other attributes?</div>
        <div><br>
        </div>
        <div>Thank you for your answers,</div>
        <div><br>
        </div>
        <div>Jiri</div>
      </div>
      <div class="gmail_extra"><br clear="all">
        <div>
          <div class="m_-2501243291815147705gmail_signature" data-smartmail="gmail_signature">
            <div dir="ltr">Jiří Brom<br>
              <br>
              e-mail: <a href="mailto:bromjiri@gmail.com" target="_blank">bromjiri@gmail.com</a><br>
              CZ: <a href="tel:%2B420723860707" value="+420723860707" target="_blank">+420723860707</a><br>
              AT: <a href="tel:%2B436607144324" value="+436607144324" target="_blank">+436607144324</a></div>
          </div>
        </div>
        <br>
        <div class="gmail_quote">On Wed, Nov 16, 2016 at 12:57 PM, Pavol
          Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div bgcolor="#FFFFFF" text="#000000">
              <p>The wizard could really have a problem in this respect.
                We haven't updated it after Services were introduced, as
                far as I know.</p>
              <span class="m_-2501243291815147705HOEnZb"><font color="#888888">
                  <pre class="m_-2501243291815147705m_6616648811823999767moz-signature" cols="72">Pavol Mederly
Software developer
<a href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre>
                </font></span>
              <div>
                <div class="m_-2501243291815147705h5">
                  <div class="m_-2501243291815147705m_6616648811823999767moz-cite-prefix">On
                    16.11.2016 12:42, Ivan Noris wrote:<br>
                  </div>
                  <blockquote type="cite">
                    <p>Hi Jiri,</p>
                    <p>I have not used Service, but for provisioning
                      objects for Roles / Organizations I'm using $focus
                      and it should be the same for Service.</p>
                    <p>Maybe the resource wizard has an issue with
                      Service? Just thinking. But using XML
                      editor/upload you should be able to access the
                      attributes as $focus/identifier etc.</p>
                    <p>Let us know please anyway.</p>
                    <p>Regards,</p>
                    <p>Ivan<br>
                    </p>
                    <br>
                    <div class="m_-2501243291815147705m_6616648811823999767moz-cite-prefix">On
                      11/16/2016 12:29 PM, Jiri Brom wrote:<br>
                    </div>
                    <blockquote type="cite">
                      <div dir="ltr">
                        <div>Hi all,</div>
                        <div><br>
                        </div>
                        <div>I have a problem with mapping of Service
                          attributes to a connector in Schema handling. </div>
                        <div>I've successfully implemented a midPoint
                          connector which maps User attributes to my
                          resource. Now I want to do the same but with
                          Service attributes.</div>
                        <div><br>
                        </div>
                        <div>In case of User attributes I can simply
                          define Outbound mapping (e.g. "name",
                          "givenName", "familyName") but I can't figure
                          out how to access Service attributes (e.g.
                          "identifier", "url") in the same way.</div>
                        <div><br>
                        </div>
                        <div>I know I should probably use "$focus/"
                          variable but the resource wizard keeps
                          notifying me "No definition for 'identifier'
                          in user". </div>
                        <div>Is there a way to simply access the Service
                          attributes? </div>
                        <div><br>
                        </div>
                        <div>Thank you very much,</div>
                        <div><br>
                        </div>
                        <div>Jiri</div>
                        <div>
                          <div class="m_-2501243291815147705m_6616648811823999767gmail_signature">
                            <div dir="ltr"><br>
                              <br>
                              e-mail: <a href="mailto:bromjiri@gmail.com" target="_blank">bromjiri@gmail.com</a><br>
                              CZ: <a href="tel:%2B420723860707" value="+420723860707" target="_blank">+420723860707</a><br>
                              <br>
                            </div>
                          </div>
                        </div>
                      </div>
                      <br>
                      <fieldset class="m_-2501243291815147705m_6616648811823999767mimeAttachmentHeader"></fieldset>
                      <br>
                      <pre>______________________________<wbr>_________________
midPoint mailing list
<a class="m_-2501243291815147705m_6616648811823999767moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a class="m_-2501243291815147705m_6616648811823999767moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a>
</pre>
      </blockquote>
      

      <pre class="m_-2501243291815147705m_6616648811823999767moz-signature" cols="72">-- 
Ivan Noris
Senior Identity Engineer
<a href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre>
      

      <fieldset class="m_-2501243291815147705m_6616648811823999767mimeAttachmentHeader"></fieldset>
      

      <pre>______________________________<wbr>_________________
midPoint mailing list
<a class="m_-2501243291815147705m_6616648811823999767moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a class="m_-2501243291815147705m_6616648811823999767moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a>
</pre>
    </blockquote>
    

  </div></div></div>


______________________________<wbr>_________________

midPoint mailing list

<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>

<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a>


</blockquote></div>
</div>


<fieldset class="m_-2501243291815147705mimeAttachmentHeader"></fieldset>
<pre>______________________________<wbr>_________________
midPoint mailing list
<a class="m_-2501243291815147705moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a class="m_-2501243291815147705moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a>
</pre>

</blockquote>
<pre class="m_-2501243291815147705moz-signature" cols="72">-- 
Ivan Noris
Senior Identity Engineer
<a href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre></div></div></div><br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br></div>