<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
        {font-family:Consolas;
        panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
h1
        {mso-style-priority:9;
        mso-style-link:"Überschrift 1 Zchn";
        margin-top:24.0pt;
        margin-right:0cm;
        margin-bottom:0cm;
        margin-left:0cm;
        margin-bottom:.0001pt;
        page-break-after:avoid;
        font-size:14.0pt;
        font-family:"Times New Roman","serif";
        font-weight:bold;}
h2
        {mso-style-priority:9;
        mso-style-link:"Überschrift 2 Zchn";
        margin-top:10.0pt;
        margin-right:0cm;
        margin-bottom:0cm;
        margin-left:0cm;
        margin-bottom:.0001pt;
        page-break-after:avoid;
        font-size:13.0pt;
        font-family:"Times New Roman","serif";
        font-weight:bold;}
h3
        {mso-style-priority:9;
        mso-style-link:"Überschrift 3 Zchn";
        margin-top:10.0pt;
        margin-right:0cm;
        margin-bottom:0cm;
        margin-left:0cm;
        margin-bottom:.0001pt;
        page-break-after:avoid;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";
        font-weight:bold;}
h4
        {mso-style-priority:9;
        mso-style-link:"Überschrift 4 Zchn";
        margin-top:10.0pt;
        margin-right:0cm;
        margin-bottom:0cm;
        margin-left:0cm;
        margin-bottom:.0001pt;
        page-break-after:avoid;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";
        font-weight:bold;
        font-style:italic;}
h5
        {mso-style-priority:9;
        mso-style-link:"Überschrift 5 Zchn";
        margin-top:10.0pt;
        margin-right:0cm;
        margin-bottom:0cm;
        margin-left:0cm;
        margin-bottom:.0001pt;
        page-break-after:avoid;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";
        font-weight:normal;}
h6
        {mso-style-priority:9;
        mso-style-link:"Überschrift 6 Zchn";
        margin-top:10.0pt;
        margin-right:0cm;
        margin-bottom:0cm;
        margin-left:0cm;
        margin-bottom:.0001pt;
        page-break-after:avoid;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";
        font-weight:normal;
        font-style:italic;}
p.MsoHeading7, li.MsoHeading7, div.MsoHeading7
        {mso-style-priority:9;
        mso-style-link:"Überschrift 7 Zchn";
        margin-top:10.0pt;
        margin-right:0cm;
        margin-bottom:0cm;
        margin-left:0cm;
        margin-bottom:.0001pt;
        page-break-after:avoid;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";
        font-style:italic;}
p.MsoHeading8, li.MsoHeading8, div.MsoHeading8
        {mso-style-priority:9;
        mso-style-link:"Überschrift 8 Zchn";
        margin-top:10.0pt;
        margin-right:0cm;
        margin-bottom:0cm;
        margin-left:0cm;
        margin-bottom:.0001pt;
        page-break-after:avoid;
        font-size:10.0pt;
        font-family:"Times New Roman","serif";}
p.MsoHeading9, li.MsoHeading9, div.MsoHeading9
        {mso-style-priority:9;
        mso-style-link:"Überschrift 9 Zchn";
        margin-top:10.0pt;
        margin-right:0cm;
        margin-bottom:0cm;
        margin-left:0cm;
        margin-bottom:.0001pt;
        page-break-after:avoid;
        font-size:10.0pt;
        font-family:"Times New Roman","serif";
        font-style:italic;}
p.MsoIndex1, li.MsoIndex1, div.MsoIndex1
        {mso-style-priority:99;
        margin-top:0cm;
        margin-right:0cm;
        margin-bottom:0cm;
        margin-left:11.0pt;
        margin-bottom:.0001pt;
        text-indent:-11.0pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
p.MsoHeader, li.MsoHeader, div.MsoHeader
        {mso-style-priority:99;
        mso-style-link:"Kopfzeile Zchn";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
p.MsoFooter, li.MsoFooter, div.MsoFooter
        {mso-style-priority:99;
        mso-style-link:"Fußzeile Zchn";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
p.MsoIndexHeading, li.MsoIndexHeading, div.MsoIndexHeading
        {mso-style-priority:99;
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";
        font-weight:bold;}
p.MsoCaption, li.MsoCaption, div.MsoCaption
        {mso-style-priority:35;
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:9.0pt;
        font-family:"Times New Roman","serif";
        font-weight:bold;}
p.MsoEnvelopeAddress, li.MsoEnvelopeAddress, div.MsoEnvelopeAddress
        {mso-style-priority:99;
        margin-top:0cm;
        margin-right:0cm;
        margin-bottom:0cm;
        margin-left:.05pt;
        margin-bottom:.0001pt;
        mso-element:frame;
        mso-element-frame-width:216.0pt;
        mso-element-frame-height:108.0pt;
        mso-element-frame-hspace:7.05pt;
        mso-element-wrap:auto;
        mso-element-anchor-horizontal:page;
        mso-element-left:center;
        mso-element-top:bottom;
        mso-height-rule:exactly;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
p.MsoEnvelopeReturn, li.MsoEnvelopeReturn, div.MsoEnvelopeReturn
        {mso-style-priority:99;
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:10.0pt;
        font-family:"Times New Roman","serif";}
p.MsoMacroText, li.MsoMacroText, div.MsoMacroText
        {mso-style-priority:99;
        mso-style-link:"Makrotext Zchn";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:10.0pt;
        font-family:"Arial","sans-serif";
        mso-fareast-language:EN-US;}
p.MsoToaHeading, li.MsoToaHeading, div.MsoToaHeading
        {mso-style-priority:99;
        margin-top:6.0pt;
        margin-right:0cm;
        margin-bottom:0cm;
        margin-left:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";
        font-weight:bold;}
p.MsoTitle, li.MsoTitle, div.MsoTitle
        {mso-style-priority:10;
        mso-style-link:"Titel Zchn";
        margin-top:0cm;
        margin-right:0cm;
        margin-bottom:15.0pt;
        margin-left:0cm;
        mso-add-space:auto;
        border:none;
        padding:0cm;
        font-size:26.0pt;
        font-family:"Times New Roman","serif";
        letter-spacing:.25pt;}
p.MsoTitleCxSpFirst, li.MsoTitleCxSpFirst, div.MsoTitleCxSpFirst
        {mso-style-priority:10;
        mso-style-link:"Titel Zchn";
        mso-style-type:export-only;
        margin:0cm;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        border:none;
        padding:0cm;
        font-size:26.0pt;
        font-family:"Times New Roman","serif";
        letter-spacing:.25pt;}
p.MsoTitleCxSpMiddle, li.MsoTitleCxSpMiddle, div.MsoTitleCxSpMiddle
        {mso-style-priority:10;
        mso-style-link:"Titel Zchn";
        mso-style-type:export-only;
        margin:0cm;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        border:none;
        padding:0cm;
        font-size:26.0pt;
        font-family:"Times New Roman","serif";
        letter-spacing:.25pt;}
p.MsoTitleCxSpLast, li.MsoTitleCxSpLast, div.MsoTitleCxSpLast
        {mso-style-priority:10;
        mso-style-link:"Titel Zchn";
        mso-style-type:export-only;
        margin-top:0cm;
        margin-right:0cm;
        margin-bottom:15.0pt;
        margin-left:0cm;
        mso-add-space:auto;
        border:none;
        padding:0cm;
        font-size:26.0pt;
        font-family:"Times New Roman","serif";
        letter-spacing:.25pt;}
p.MsoMessageHeader, li.MsoMessageHeader, div.MsoMessageHeader
        {mso-style-priority:99;
        mso-style-link:"Nachrichtenkopf Zchn";
        margin-top:0cm;
        margin-right:0cm;
        margin-bottom:0cm;
        margin-left:2.0cm;
        margin-bottom:.0001pt;
        text-indent:-2.0cm;
        background:#CCCCCC;
        border:none;
        padding:0cm;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
p.MsoSubtitle, li.MsoSubtitle, div.MsoSubtitle
        {mso-style-priority:11;
        mso-style-link:"Untertitel Zchn";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";
        letter-spacing:.75pt;
        font-style:italic;}
p.MsoBlockText, li.MsoBlockText, div.MsoBlockText
        {mso-style-priority:99;
        margin-top:0cm;
        margin-right:57.6pt;
        margin-bottom:0cm;
        margin-left:57.6pt;
        margin-bottom:.0001pt;
        border:none;
        padding:0cm;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";
        font-style:italic;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p.MsoDocumentMap, li.MsoDocumentMap, div.MsoDocumentMap
        {mso-style-priority:99;
        mso-style-link:"Dokumentstruktur Zchn";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:8.0pt;
        font-family:"Times New Roman","serif";}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
        {mso-style-priority:99;
        mso-style-link:"Nur Text Zchn";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:10.5pt;
        font-family:"Times New Roman","serif";}
p
        {mso-style-priority:99;
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
code
        {mso-style-priority:99;
        font-family:"Arial","sans-serif";
        color:windowtext;}
kbd
        {mso-style-priority:99;
        font-family:"Arial","sans-serif";}
pre
        {mso-style-priority:99;
        mso-style-link:"HTML Vorformatiert Zchn";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:10.0pt;
        font-family:"Times New Roman","serif";}
samp
        {mso-style-priority:99;
        font-family:"Arial","sans-serif";}
tt
        {mso-style-priority:99;
        font-family:"Arial","sans-serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
        {mso-style-priority:99;
        mso-style-link:"Sprechblasentext Zchn";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:8.0pt;
        font-family:"Times New Roman","serif";}
p.MsoIntenseQuote, li.MsoIntenseQuote, div.MsoIntenseQuote
        {mso-style-priority:30;
        mso-style-link:"Intensives Zitat Zchn";
        margin-top:10.0pt;
        margin-right:46.8pt;
        margin-bottom:14.0pt;
        margin-left:46.8pt;
        border:none;
        padding:0cm;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";
        font-weight:bold;
        font-style:italic;}
span.MsoIntenseEmphasis
        {mso-style-priority:21;
        color:windowtext;
        font-weight:bold;
        font-style:italic;}
span.MsoSubtleReference
        {mso-style-priority:31;
        font-variant:small-caps;
        color:windowtext;
        text-decoration:underline;}
span.MsoIntenseReference
        {mso-style-priority:32;
        font-variant:small-caps;
        color:windowtext;
        letter-spacing:.25pt;
        font-weight:bold;
        text-decoration:underline;}
span.MsoBookTitle
        {mso-style-priority:33;
        font-variant:small-caps;
        letter-spacing:.25pt;
        font-weight:bold;}
p.MsoTocHeading, li.MsoTocHeading, div.MsoTocHeading
        {mso-style-priority:39;
        margin-top:24.0pt;
        margin-right:0cm;
        margin-bottom:0cm;
        margin-left:0cm;
        margin-bottom:.0001pt;
        page-break-after:avoid;
        font-size:14.0pt;
        font-family:"Times New Roman","serif";
        font-weight:bold;}
span.berschrift1Zchn
        {mso-style-name:"Überschrift 1 Zchn";
        mso-style-priority:9;
        mso-style-link:"Überschrift 1";
        font-family:"Arial","sans-serif";
        font-weight:bold;}
span.berschrift2Zchn
        {mso-style-name:"Überschrift 2 Zchn";
        mso-style-priority:9;
        mso-style-link:"Überschrift 2";
        font-family:"Arial","sans-serif";
        font-weight:bold;}
span.berschrift3Zchn
        {mso-style-name:"Überschrift 3 Zchn";
        mso-style-priority:9;
        mso-style-link:"Überschrift 3";
        font-family:"Arial","sans-serif";
        font-weight:bold;}
span.berschrift4Zchn
        {mso-style-name:"Überschrift 4 Zchn";
        mso-style-priority:9;
        mso-style-link:"Überschrift 4";
        font-family:"Arial","sans-serif";
        font-weight:bold;
        font-style:italic;}
span.berschrift5Zchn
        {mso-style-name:"Überschrift 5 Zchn";
        mso-style-priority:9;
        mso-style-link:"Überschrift 5";
        font-family:"Arial","sans-serif";}
span.berschrift6Zchn
        {mso-style-name:"Überschrift 6 Zchn";
        mso-style-priority:9;
        mso-style-link:"Überschrift 6";
        font-family:"Arial","sans-serif";
        font-style:italic;}
span.berschrift7Zchn
        {mso-style-name:"Überschrift 7 Zchn";
        mso-style-priority:9;
        mso-style-link:"Überschrift 7";
        font-family:"Arial","sans-serif";
        font-style:italic;}
span.berschrift8Zchn
        {mso-style-name:"Überschrift 8 Zchn";
        mso-style-priority:9;
        mso-style-link:"Überschrift 8";
        font-family:"Arial","sans-serif";}
span.berschrift9Zchn
        {mso-style-name:"Überschrift 9 Zchn";
        mso-style-priority:9;
        mso-style-link:"Überschrift 9";
        font-family:"Arial","sans-serif";
        font-style:italic;}
span.TitelZchn
        {mso-style-name:"Titel Zchn";
        mso-style-priority:10;
        mso-style-link:Titel;
        font-family:"Arial","sans-serif";
        letter-spacing:.25pt;}
span.UntertitelZchn
        {mso-style-name:"Untertitel Zchn";
        mso-style-priority:11;
        mso-style-link:Untertitel;
        font-family:"Arial","sans-serif";
        letter-spacing:.75pt;
        font-style:italic;}
span.IntensivesZitatZchn
        {mso-style-name:"Intensives Zitat Zchn";
        mso-style-priority:30;
        mso-style-link:"Intensives Zitat";
        font-family:"Arial","sans-serif";
        font-weight:bold;
        font-style:italic;}
span.DokumentstrukturZchn
        {mso-style-name:"Dokumentstruktur Zchn";
        mso-style-priority:99;
        mso-style-link:Dokumentstruktur;
        font-family:"Arial","sans-serif";}
span.HTMLVorformatiertZchn
        {mso-style-name:"HTML Vorformatiert Zchn";
        mso-style-priority:99;
        mso-style-link:"HTML Vorformatiert";
        font-family:"Arial","sans-serif";}
span.MakrotextZchn
        {mso-style-name:"Makrotext Zchn";
        mso-style-priority:99;
        mso-style-link:Makrotext;
        font-family:"Arial","sans-serif";}
span.NachrichtenkopfZchn
        {mso-style-name:"Nachrichtenkopf Zchn";
        mso-style-priority:99;
        mso-style-link:Nachrichtenkopf;
        font-family:"Arial","sans-serif";
        background:#CCCCCC;}
span.NurTextZchn
        {mso-style-name:"Nur Text Zchn";
        mso-style-priority:99;
        mso-style-link:"Nur Text";
        font-family:"Arial","sans-serif";}
span.SprechblasentextZchn
        {mso-style-name:"Sprechblasentext Zchn";
        mso-style-priority:99;
        mso-style-link:Sprechblasentext;
        font-family:"Arial","sans-serif";}
span.KopfzeileZchn
        {mso-style-name:"Kopfzeile Zchn";
        mso-style-priority:99;
        mso-style-link:Kopfzeile;
        font-family:"Arial","sans-serif";}
span.FuzeileZchn
        {mso-style-name:"Fußzeile Zchn";
        mso-style-priority:99;
        mso-style-link:Fußzeile;
        font-family:"Arial","sans-serif";}
span.E-MailFormatvorlage207
        {mso-style-type:personal-reply;
        font-family:"Arial","sans-serif";
        color:#1F497D;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-family:"Calibri","sans-serif";
        mso-fareast-language:EN-US;}
@page WordSection1
        {size:612.0pt 792.0pt;
        margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#1F497D">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#1F497D">we had a similar problem, but in our case the user is not deleted in midpoint, it just loses the assignment (which contains account creation).<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#1F497D">We also have
<o:p></o:p></span></p>
<p class="MsoNormal"><i><span lang="EN-GB" style="font-family:"Arial","sans-serif""><activation></span></i><span lang="EN-GB" style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><i><span lang="EN-GB" style="font-family:"Arial","sans-serif"">      <existence></span></i><span lang="EN-GB" style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><i><span lang="EN-GB" style="font-family:"Arial","sans-serif"">        <outbound></span></i><span lang="EN-GB" style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><i><span lang="EN-GB" style="font-family:"Arial","sans-serif"">            <expression></span></i><span lang="EN-GB" style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><i><span lang="EN-GB" style="font-family:"Arial","sans-serif"">               
<b><value>true</value></b></span></i><span lang="EN-GB" style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><i><span lang="EN-GB" style="font-family:"Arial","sans-serif"">           
</span></i><i><span style="font-family:"Arial","sans-serif""></expression></span></i><span style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><i><span style="font-family:"Arial","sans-serif"">        </outbound></span></i><span style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><i><span style="font-family:"Arial","sans-serif"">    </existence></span></i><span style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><i><span style="font-family:"Arial","sans-serif""></activation</span></i><span style="font-family:"Arial","sans-serif"">><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#1F497D">and solved the issue by adding a “fallback” when calculating dn in outbound expression for <ref>ri:dn</ref><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#1F497D">if (account){<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#1F497D">            dn = basic.getAttributeValue(account, 'http://midpoint.evolveum.com/xml/ns/public/resource/instance-3', 'dn')<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#1F497D">            return dn<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#1F497D">}<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#1F497D">Regards, Michael<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Von:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> midPoint [mailto:midpoint-bounces@lists.evolveum.com]
<b>Im Auftrag von </b>Martin Besozzi<br>
<b>Gesendet:</b> Donnerstag, 26. Januar 2017 17:15<br>
<b>An:</b> midPoint General Discussion<br>
<b>Betreff:</b> [midPoint] Prevent AD user deletion when the user is deleted on Midpoint<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif"">Hi, All.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif"">We want to prevent sending a delete operation to the AD Resource when the user is deleted on Midpoint. We added the following code to the AD Resource activation node:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><i><span style="font-family:"Arial","sans-serif""><activation></span></i><span style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><i><span style="font-family:"Arial","sans-serif"">      <existence></span></i><span style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><i><span style="font-family:"Arial","sans-serif"">        <outbound></span></i><span style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><i><span style="font-family:"Arial","sans-serif"">            <expression></span></i><span style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><i><span style="font-family:"Arial","sans-serif"">               
<b><value>true</value></b></span></i><span style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><i><span style="font-family:"Arial","sans-serif"">            </expression></span></i><span style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><i><span style="font-family:"Arial","sans-serif"">        </outbound></span></i><span style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><i><span style="font-family:"Arial","sans-serif"">    </existence></span></i><span style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><i><span style="font-family:"Arial","sans-serif""></activation</span></i><span style="font-family:"Arial","sans-serif"">><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif"">With this code we prevented the user deletion on the Resource when the user was manualy deleted on Midpoint, but the GUI showed us the following error:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><i><span style="font-family:"Arial","sans-serif"">Schema violation during processing shadow: shadow: CN=usertest,OU=xxx,DC=xxx,DC=local (OID:2d534333-cd76-4642-b967-350834cc6ac7): Schema violation: Value of attribute '__NAME__' must be
 a single value, but it has 0 values</span></i><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Is there another way to do this?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">We also found in the documentation the following code in order to prevent a user deletion. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"><i><activation></i><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><i>      <existence></i><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><i>        <outbound></i><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><i>            <strength>weak</strength></i><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><i>            <expression></i><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><i>             <b>   <path>$focusExists</path></b></i><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><i>            </expression></i><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><i>        </outbound></i><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><i>    </existence></i><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><i></activation></i><o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">In this case, the user is not deleted on the Resource if it loses the resource account. But if we delete the user on Midpoint it doesn't prevent the user deletion on the Resource. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Any help is appreciated. Thanks in advance<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Regards.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif"">Ing Martin Besozzi</span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif"">Identicum S.A.</span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif"">Jorge Newbery 3226</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif"">Tel: +54 (11) 4552-3050</span><o:p></o:p></p>
</div>
<p class="MsoNormal"><a href="http://www.identicum.com" target="_blank"><span style="font-family:"Arial","sans-serif"">www.identicum.com</span></a><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
WWK Lebensversicherung a. G., Vorstand: Jürgen Schrameier (V.), Rainer Gebhart (stv. V.), Dirk Fassott; Vorsitzender des Aufsichtsrats: Dr. Frank Schindelhauer, Sitz München, Registergericht München HR B 211; WWK Allgemeine Versicherung AG, Vorstand: Jürgen
 Schrameier (V.), Rainer Gebhart (stv. V.), Dirk Fassott; Vorsitzender des Aufsichtsrats: Werner Quante, Sitz München, Registergericht München HR B 5553; WWK Vermögensverwaltungs und Dienstleistungs GmbH, Geschäftsführer: Karl Ruffing, Stefan Sedlmeir, Sitz
 München, Registergericht München HR B 76323; WWK Pensionsfonds AG, Vorstand: Ansgar Eckert, Karl Ruffing, Heinrich Schüppert; Vorsitzender des Aufsichtsrats: Dirk Fassott, Sitz München, Registergericht München HR B 146295; Hausanschrift: Marsstraße 37, 80335
 München; WWK Investment S.A., Verwaltungsrat: Karl Ruffing (V.), Ansgar Eckert, Stefan Schneider (Hauck & Aufhäuser), Handelsregister: R.C. Luxembourg Nr. B 81 270, Sitz der Gesellschaft: 1c, rue Gabriel Lippmann, L-5365 Munsbach
</body>
</html>