<div dir="ltr">Hi,<div><br></div><div>you were right with the wizard issue. When working in wizard schema handler won't even let you to save "<span style="font-size:12.8px">$focus/identifier" but in XML editor it works fine.</span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">Thank you very much for your help :)</span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">J.</span></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr">Jiří Brom<br><br>e-mail: <a href="mailto:bromjiri@gmail.com" target="_blank">bromjiri@gmail.com</a><br>CZ: +420723860707<br>AT: +436607144324</div></div></div>
<br><div class="gmail_quote">On Wed, Nov 16, 2016 at 5:36 PM, Pavol Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>Resource wizard tries to determine focus type based on
<synchronization> section; so the problem could be there.</p>
<p>Best regards,<br>
</p><span class="">
<pre class="m_2901770656359406202moz-signature" cols="72">Pavol Mederly
Software developer
<a href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre>
</span><div><div class="h5"><div class="m_2901770656359406202moz-cite-prefix">On 16.11.2016 15:47, Ivan Noris wrote:<br>
</div>
<blockquote type="cite">
<p>Hi,</p>
<p>schema handling looks ok for me - mapping whatever focus to
account. Btw. which connector are you using?<br>
</p>
<p>But - how are you provisioning this? Which role are you
assigning to your Service?</p>
<p>I need to see the inducement part of the role...</p>
<p>Ivan<br>
</p>
<br>
<div class="m_2901770656359406202moz-cite-prefix">On 11/16/2016 03:11 PM, Jiri Brom
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hi,
<div><br>
</div>
<div>Just for testing I tried to map $focus/identifier as
Source in the existing LDAP connector in online demo. In
schema handling called "LDAP project groups" it was working.
The main difference from my schema handling is that it has
__GROUP__ objectClass. Is it possible that attributes from
Org, Role or Service can be mapped only to __GROUP__ object
class? </div>
<div><br>
</div>
<div>My schema handling is following:</div>
<div><br>
</div>
<div><schemaHandling></div>
<div> <objectType></div>
<div> <kind>account</kind></div>
<div> <default>true</default></div>
<div>
<objectClass>ri:<wbr>AccountObjectClass</<wbr>objectClass></div>
<div> <attribute></div>
<div> <c:ref>icfs:name</c:ref></div>
<div> <tolerant>true</tolerant></div>
<div>
<exclusiveStrong>false</<wbr>exclusiveStrong></div>
<div> <outbound></div>
<div>
<authoritative>true</<wbr>authoritative></div>
<div> <exclusive>false</exclusive></div>
<div> <strength>normal</strength></div>
<div> <source></div>
<div>
<c:path>$focus/name</c:path></div>
<div> </source></div>
<div> </outbound></div>
<div> </attribute></div>
<div> <attribute></div>
<div> <c:ref>ri:identifier</c:ref></div>
<div> <tolerant>true</tolerant></div>
<div>
<exclusiveStrong>false</<wbr>exclusiveStrong></div>
<div> <outbound></div>
<div>
<authoritative>true</<wbr>authoritative></div>
<div> <exclusive>false</exclusive></div>
<div> <strength>normal</strength></div>
<div> <source></div>
<div>
<c:path>$focus/identifier</c:<wbr>path></div>
<div> </source></div>
<div> </outbound></div>
<div> </attribute></div>
<div> </objectType></div>
<div> </schemaHandling> </div>
<div><br>
</div>
<div><br>
</div>
<div>Thank you for your answers,</div>
<div><br>
</div>
<div>Jiri</div>
<div><br>
</div>
</div>
<div class="gmail_extra"><br clear="all">
<div>
<div class="m_2901770656359406202gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">Jiří Brom<br>
<br>
e-mail: <a href="mailto:bromjiri@gmail.com" target="_blank">bromjiri@gmail.com</a><br>
CZ: <a href="tel:%2B420723860707" value="+420723860707" target="_blank">+420723860707</a><br>
AT: <a href="tel:%2B436607144324" value="+436607144324" target="_blank">+436607144324</a></div>
</div>
</div>
<br>
<div class="gmail_quote">On Wed, Nov 16, 2016 at 1:33 PM, Ivan
Noris <span dir="ltr"><<a href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>Hi,</p>
<p>the __ACCOUNT__ is the default, yes.</p>
<p>I don't know which connector are you using, but in
general there is no problem for midPoint to create
accounts for organizations or roles; it's just not
very common. Normally you sould use
<objectClass> in the schema handling to tell the
connector which kind of the object it should create.</p>
<p>Could you share the resource of at least part of it -
schema handling?</p>
<span class="m_2901770656359406202HOEnZb"><font color="#888888">
<p>Ivan<br>
</p>
</font></span>
<div>
<div class="m_2901770656359406202h5"> <br>
<div class="m_2901770656359406202m_-2501243291815147705moz-cite-prefix">On
11/16/2016 01:07 PM, Jiri Brom wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hi,
<div><br>
</div>
<div>In my case when I try to map for instance
"$focus/tenant", which is an attribute of
OrgType (<a href="https://wiki.evolveum.com/display/midPoint/OrgType" target="_blank">https://wiki.evolveum.com/dis<wbr>play/midPoint/OrgType</a>)
it also doesn't work. Still the same error "No
definition for 'tenant' in user". I think I do
some stupid mistake in setup which allows me
to provision User attributes only. Do you use
some special configuration when working with
OrgType or RoleType? E.g. Kind, Intent, etc..</div>
<div><br>
</div>
<div>Or is it possible that the problem is in
the ObjectClass defined in my connector
schema? As I understand the Connector
Development Guide, then __ACOUNT__ is the
default one (I am using that one). Do I have
to use some other ObjectClass when mapping
Role, Org or other attributes?</div>
<div><br>
</div>
<div>Thank you for your answers,</div>
<div><br>
</div>
<div>Jiri</div>
</div>
<div class="gmail_extra"><br clear="all">
<div>
<div class="m_2901770656359406202m_-2501243291815147705gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">Jiří Brom<br>
<br>
e-mail: <a href="mailto:bromjiri@gmail.com" target="_blank">bromjiri@gmail.com</a><br>
CZ: <a href="tel:%2B420723860707" value="+420723860707" target="_blank">+420723860707</a><br>
AT: <a href="tel:%2B436607144324" value="+436607144324" target="_blank">+436607144324</a></div>
</div>
</div>
<br>
<div class="gmail_quote">On Wed, Nov 16, 2016 at
12:57 PM, Pavol Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>The wizard could really have a problem
in this respect. We haven't updated it
after Services were introduced, as far
as I know.</p>
<span class="m_2901770656359406202m_-2501243291815147705HOEnZb"><font color="#888888">
<pre class="m_2901770656359406202m_-2501243291815147705m_6616648811823999767moz-signature" cols="72">Pavol Mederly
Software developer
<a href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre>
</font></span>
<div>
<div class="m_2901770656359406202m_-2501243291815147705h5">
<div class="m_2901770656359406202m_-2501243291815147705m_6616648811823999767moz-cite-prefix">On
16.11.2016 12:42, Ivan Noris wrote:<br>
</div>
<blockquote type="cite">
<p>Hi Jiri,</p>
<p>I have not used Service, but for
provisioning objects for Roles /
Organizations I'm using $focus and
it should be the same for Service.</p>
<p>Maybe the resource wizard has an
issue with Service? Just thinking.
But using XML editor/upload you
should be able to access the
attributes as $focus/identifier
etc.</p>
<p>Let us know please anyway.</p>
<p>Regards,</p>
<p>Ivan<br>
</p>
<br>
<div class="m_2901770656359406202m_-2501243291815147705m_6616648811823999767moz-cite-prefix">On
11/16/2016 12:29 PM, Jiri Brom
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div>Hi all,</div>
<div><br>
</div>
<div>I have a problem with
mapping of Service attributes
to a connector in Schema
handling. </div>
<div>I've successfully
implemented a midPoint
connector which maps User
attributes to my resource. Now
I want to do the same but with
Service attributes.</div>
<div><br>
</div>
<div>In case of User attributes
I can simply define Outbound
mapping (e.g. "name",
"givenName", "familyName") but
I can't figure out how to
access Service attributes
(e.g. "identifier", "url") in
the same way.</div>
<div><br>
</div>
<div>I know I should probably
use "$focus/" variable but the
resource wizard keeps
notifying me "No definition
for 'identifier' in user". </div>
<div>Is there a way to simply
access the Service
attributes? </div>
<div><br>
</div>
<div>Thank you very much,</div>
<div><br>
</div>
<div>Jiri</div>
<div>
<div class="m_2901770656359406202m_-2501243291815147705m_6616648811823999767gmail_signature">
<div dir="ltr"><br>
<br>
e-mail: <a href="mailto:bromjiri@gmail.com" target="_blank">bromjiri@gmail.com</a><br>
CZ: <a href="tel:%2B420723860707" value="+420723860707" target="_blank">+420723860707</a><br>
<br>
</div>
</div>
</div>
</div>
<br>
<fieldset class="m_2901770656359406202m_-2501243291815147705m_6616648811823999767mimeAttachmentHeader"></fieldset>
<br>
<pre>______________________________<wbr>_________________
midPoint mailing list
<a class="m_2901770656359406202m_-2501243291815147705m_6616648811823999767moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a class="m_2901770656359406202m_-2501243291815147705m_6616648811823999767moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a>
</pre>
</blockquote>
<pre class="m_2901770656359406202m_-2501243291815147705m_6616648811823999767moz-signature" cols="72">--
Ivan Noris
Senior Identity Engineer
<a href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre>
<fieldset class="m_2901770656359406202m_-2501243291815147705m_6616648811823999767mimeAttachmentHeader"></fieldset>
<pre>______________________________<wbr>_________________
midPoint mailing list
<a class="m_2901770656359406202m_-2501243291815147705m_6616648811823999767moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a class="m_2901770656359406202m_-2501243291815147705m_6616648811823999767moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a>
</pre>
</blockquote>
</div></div></div>
______________________________<wbr>_________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a>
</blockquote></div>
</div>
<fieldset class="m_2901770656359406202m_-2501243291815147705mimeAttachmentHeader"></fieldset>
<pre>______________________________<wbr>_________________
midPoint mailing list
<a class="m_2901770656359406202m_-2501243291815147705moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a class="m_2901770656359406202m_-2501243291815147705moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a>
</pre>
</blockquote>
<pre class="m_2901770656359406202m_-2501243291815147705moz-signature" cols="72">--
Ivan Noris
Senior Identity Engineer
<a href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre></div></div></div>
______________________________<wbr>_________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a>
</blockquote></div>
</div>
<fieldset class="m_2901770656359406202mimeAttachmentHeader"></fieldset>
<pre>______________________________<wbr>_________________
midPoint mailing list
<a class="m_2901770656359406202moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a class="m_2901770656359406202moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<pre class="m_2901770656359406202moz-signature" cols="72">--
Ivan Noris
Senior Identity Engineer
<a href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre>
<fieldset class="m_2901770656359406202mimeAttachmentHeader"></fieldset>
<pre>______________________________<wbr>_________________
midPoint mailing list
<a class="m_2901770656359406202moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a class="m_2901770656359406202moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a>
</pre>
</blockquote>
</div></div></div><br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br></div>