<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Hi Dilek,</p>
<p>not sure if I understand, so I try to explain what I think you
want.</p>
<p>If you want to get your midPoint users to AD, the term "bulk
import" does not quite correspond to it. To me it seems you want
to provision your midpoint users to AD.</p>
<p>LiveSync and Reconciliation evaluate situations/changes in
resource and are able to import the accounts to midPoint and link
or create users.<br>
</p>
<p>To provision users to AD resource, you need:<br>
</p>
<p>1) outbound mappings in your resource. That is probably OK, as
you can manually add AD account to (specific) users</p>
<p>2) role with construction to AD resource</p>
<p>3) default object template which will assign role from 2) to (all
or specific) users in midPoint</p>
<p>Example of such template is:
<a class="moz-txt-link-freetext" href="https://github.com/Evolveum/midpoint/blob/v3.5.1/samples/objects/object-template-user.xml">https://github.com/Evolveum/midpoint/blob/v3.5.1/samples/objects/object-template-user.xml</a></p>
<p>See the mapping named "basic role". The "oid" referenced in
assignmentTargetSearch is the oid of your role (with construction
for AD account). In real life, there should be a condition so that
the role is not assigned to all users, but e.g. to employees only.<br>
</p>
<p>The template must be configured as default in Configuration -
System for UserType objects.</p>
<p>After that, you only need to edit any existing user and check
"Reconcile" checkbox and save. The account will be created
according to the role and AD schema handling mappings.</p>
<p>To populate all users, you would need to run Recompute task. That
would do exactly the same as "Reconcile" checkbox for all users.</p>
<p>Regards,</p>
<p>Ivan<br>
</p>
<br>
<div class="moz-cite-prefix">On 05/10/2017 11:52 AM, Dilek Gider
wrote:<br>
</div>
<blockquote
cite="mid:CAL797Gn7JyYdB_yQANQmH7QsomNjHzeq+1gKo_UH3ac97gcOxQ@mail.gmail.com"
type="cite">
<div dir="ltr">Hi All,
<div><br>
</div>
<div>I have a resource with ADLDAPConnector. I want to add all
of midpoint users to AD.</div>
<div>I have a resource xml, it works by manually adding user to
AD account. But when I run recon job task or live synch task,
it only evaluates AD users, doesn't evaluate midpoint users.
Is there any other method to create midpoint users in any
resource?</div>
<div><br>
</div>
<div>Thank you very much.</div>
<div><br>
</div>
<div>Dilek</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ivan Noris
Senior Identity Engineer
evolveum.com
</pre>
</body>
</html>