<div dir="ltr">Hi Brad,<div><br></div><div>for similar case I'm using something like:</div><div><div> <inbound></div><div> <strength>strong</strength></div><div> <target></div><div> <c:path>locality</c:path></div><div> </target></div><div> <expression></div><div> <description>Fixed locality</description></div><div> <value>Bratislava</value></div><div> </expression></div><div> </inbound><br></div><div> </attribute></div></div><div><br></div><div>Gustav</div></div><div class="gmail_extra"><br><div class="gmail_quote">2017-04-19 20:42 GMT+02:00 Brad Firestone <span dir="ltr"><<a href="mailto:bhotrock@gmail.com" target="_blank">bhotrock@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello,<br>
I am trying to connect an Active Directory resource which will be an authoritative source for some of my midPoint Users. However, I need to set some static values for the midPoint User extended attributes and these values are unrelated to anything in Active Directory. I've read everything I can find about inbound mapping and expressions and can't find how to configure the mapping when there's not a source, and the value will just be created by the expression. The problem seems to be what to put in the <ref> field. (It doesn't work without something there.) I have five of these attributes that I need to set.<br>
<br>
Here is my intended attribute setting from the AD resource, without a <ref> field:<br>
<br>
<attribute><br>
<ref></ref><br>
<displayName>Affiliation</disp<wbr>layName><br>
<inbound><br>
<expression><br>
<value>HQ-AD</value><br>
</expression><br>
<target><br>
<path>$user/extension/affiliat<wbr>ion</path><br>
</target><br>
</inbound><br>
</attribute><br>
<br>
I'm still getting started with midPoint, and know I'm missing a lot of understanding. Maybe this is something that I need to handle using Object Templates? (I'm still trying to wrap my brain around how Templates are used.)<br>
<br>
My overall goal is to be able to automatically pull midPoint Users from several different resources including two different Active Directories, and three different LDAP directories. Each of these connections will be inbound ONLY. We will also create users directly in midPoint. Then I would use outbound mappings to a different LDAP directory (we can call it MasterLDAP) that will include an account for all the midPoint Users. I would like all of this to happen "automatically" so that when an account is added to one of the "source" resources, the midPoint User will be created and also the MasterLDAP account would be projected. We may also end up projecting accounts to other resources at some time in the future, but what I have listed is Phase 1.<br>
<br>
I would be grateful for any advice on how to best do this.<br>
Thank you!<br>
Brad<br>
______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>Gustáv Pálos</div><div>Identity Engineer</div><a href="http://evolveum.com/" rel="noreferrer" style="color:rgb(17,85,204);font-size:12.8px" target="_blank">evolveum.com</a><br></div></div>
</div>