<div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(68,68,68)">Hi Ivan, here are the XMLs:</div><div class="gmail_default"><ul><li><font color="#444444" face="arial, helvetica, sans-serif">ScriptedSQL-Grupo1.xml: A role with an association to an entitlement</font></li><li><font color="#444444" face="arial, helvetica, sans-serif">ScriptedSQL-Grupo3.xml: A role with an assignment to a MetaRole</font></li><li><font color="#444444" face="arial, helvetica, sans-serif">ScriptedSQL-MetaRole-1.xml: First alternative with another assignment</font></li><li><font color="#444444" face="arial, helvetica, sans-serif">ScriptedSQL-MetaRole-2.xml: Second alternative with an inducement to Group 3</font></li><li><font color="#444444" face="arial, helvetica, sans-serif">ScriptedSQL-MetaRole-3.xml: Second alternative with an inducement to Group 1</font></li></ul><div><font color="#444444" face="arial, helvetica, sans-serif">Thanks in advance ! </font></div><div><font color="#444444" face="arial, helvetica, sans-serif"><br></font></div><div><font color="#444444" face="arial, helvetica, sans-serif">Best regards</font></div></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><font face="arial, helvetica, sans-serif"><br><br><font color="#444444">Ing Nicolás Rossi</font><br><font color="#999999">Identicum S.A.</font><br><font color="#999999">Jorge Newbery 3226</font><br><font color="#999999">Tel: +54 (11) 4552-3050</font><br><font color="#999999"><a href="http://www.identicum.com" target="_blank">www.identicum.com</a></font></font><br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote">On Thu, Nov 24, 2016 at 6:20 PM, Ivan Noris <span dir="ltr"><<a href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
  
    
  
  <div bgcolor="#FFFFFF" text="#000000">
    <p>Hi Nicolas,</p>
    <p>can you paste the (three) attempts how the MetaRole looks,
      anonymized if necessary? Maybe I will have an idea by looking at
      it.</p>
    <p>Regards,</p>
    <p>Ivan<br>
    </p><div><div class="h5">
    <br>
    <div class="m_1133232737013364190moz-cite-prefix">On 11/24/2016 09:52 PM, Nicolas Rossi
      wrote:<br>
    </div>
    <blockquote type="cite">
      <div dir="ltr">
        <div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(68,68,68)">Hi
          guys. We are still working on this issue. We have tried 3
          alternatives to achieve it. All of them working on the
          resource MetaRole:</div>
        <div class="gmail_default"><span style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif"><br>
          </span></div>
        <div class="gmail_default"><span style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif">1)
            Add a new association on the existing inducement constructor
            directly to the entitlement on the resource. It works fine
            (entitlement is provisioned) but we cannot see this
            assignment on the GUI.</span></div>
        <div class="gmail_default">
          <div><font color="#444444" face="arial, helvetica, sans-serif"><br>
            </font></div>
          <span style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif">2)
            Add an inducement to an existing role which has an
            assignment to the resource MetaRole. I can see the
            assignment on the GUI but the entitlement is not provisioned
            to the resource.</span><br>
        </div>
        <div class="gmail_default"><span style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif"><br>
          </span></div>
        <div class="gmail_default"><span style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif">3)
            Add an inducement to an existing role which has an
            inducement with association to the entitlement on the
            resource.</span><span style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif"> </span><span style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif">I can
            see the assignment on the GUI but the entitlement is not
            provisioned to the resource.</span></div>
        <div class="gmail_default"><span style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif"><br>
          </span></div>
        <div class="gmail_default"><span style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif">Is
            there any other possible configuration ?</span></div>
        <div class="gmail_extra"><br clear="all">
          <div>
            <div class="m_1133232737013364190gmail_signature" data-smartmail="gmail_signature">
              <div dir="ltr">
                <div>
                  <div dir="ltr">
                    <div>
                      <div dir="ltr">
                        <div>
                          <div dir="ltr">
                            <div>
                              <div dir="ltr">
                                <div>
                                  <div dir="ltr">
                                    <div>
                                      <div dir="ltr">
                                        <div>
                                          <div dir="ltr"><font face="arial, helvetica,
                                              sans-serif">
                                              <div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(68,68,68);display:inline">​Best
                                                regards,</div>
                                            </font></div>
                                          <div dir="ltr"><font face="arial, helvetica,
                                              sans-serif">
                                              <div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(68,68,68);display:inline">​</div>
                                              <br>
                                              <br>
                                              <font color="#444444">Ing
                                                Nicolás Rossi</font><br>
                                              <font color="#999999">Identicum
                                                S.A.</font><br>
                                              <font color="#999999">Jorge
                                                Newbery 3226</font><br>
                                              <font color="#999999">Tel:
                                                +54 (11) 4552-3050</font><br>
                                              <font color="#999999"><a href="http://www.identicum.com" target="_blank">www.identicum.com</a></font></font><br>
                                          </div>
                                        </div>
                                      </div>
                                    </div>
                                  </div>
                                </div>
                              </div>
                            </div>
                          </div>
                        </div>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
            </div>
          </div>
          <br>
          <div class="gmail_quote">On Mon, Nov 21, 2016 at 5:56 PM, Ana
            Pereyra <span dir="ltr"><<a href="mailto:apereyra@identicum.com" target="_blank">apereyra@identicum.com</a>></span>
            wrote:<br>
            <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
              <div dir="ltr">Hi everyone,
                <div><br>
                </div>
                <div>We are having the following issue:</div>
                <div><br>
                </div>
                <div>We need to assign the role B to users after being
                  created in resource A, automatically. </div>
                <div><br>
                </div>
                <div>We are using a scripted sql driver, and a meta role
                  for creating users and groups in the database; and
                  role B is a group in resource A.</div>
                <div><br>
                </div>
                <div>We have been trying to assign indirectly role B to
                  users using the meta role, with no luck. Any ideas on
                  how to approach this?</div>
                <div><br>
                </div>
                <div>Thanks in advance.</div>
                <div>Regards</div>
                <span class="m_1133232737013364190HOEnZb"><font color="#888888">
                    <div>
                      <div><br>
                      </div>
                      -- <br>
                      <div class="m_1133232737013364190m_5555873668252606585gmail_signature" data-smartmail="gmail_signature">
                        <div dir="ltr">
                          <div>
                            <div dir="ltr">
                              <div>
                                <div dir="ltr">
                                  <div>
                                    <div dir="ltr">
                                      <div>
                                        <div dir="ltr"><b style="font-size:12.8px">Ana
                                            Pereyra</b><br>
                                        </div>
                                        <div dir="ltr"><font style="font-size:12.8px" face="verdana, sans-serif"><img src="http://www.identicum.com/img/favicon.ico"> Identicum
                                            S.A.<br>
                                            <i><font color="#666666">Jorge
                                                Newbery 3226, Argentina<br>
                                                Tel: +54 (11) </font></i></font><font style="font-size:12.8px" color="#666666" face="verdana, sans-serif"><i>4552.3050</i></font>
                                          <div style="font-size:12.8px"><font face="verdana, sans-serif"><i><font size="1"><a href="mailto:apereyra@identicum.com" style="color:rgb(17,85,204)" target="_blank">apereyra@identicum.com</a></font></i><br>
                                              <a href="http://www.identicum.com/" style="color:rgb(17,85,204)" target="_blank"><font color="#000000">www.identicum.com</font></a></font></div>
                                        </div>
                                      </div>
                                    </div>
                                  </div>
                                </div>
                              </div>
                            </div>
                          </div>
                        </div>
                      </div>
                    </div>
                  </font></span></div>
              <br>
              ______________________________<wbr>_________________<br>
              midPoint mailing list<br>
              <a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
              <a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
              <br>
            </blockquote>
          </div>
          <br>
        </div>
      </div>
      <br>
      <fieldset class="m_1133232737013364190mimeAttachmentHeader"></fieldset>
      <br>
      <pre>______________________________<wbr>_________________
midPoint mailing list
<a class="m_1133232737013364190moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a class="m_1133232737013364190moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a>
</pre>
    </blockquote>
    <br>
    </div></div><span class="HOEnZb"><font color="#888888"><pre class="m_1133232737013364190moz-signature" cols="72">-- 
Ivan Noris
Senior Identity Engineer
<a href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre>
  </font></span></div>

<br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br></div>