<div dir="ltr">Hi, I dont know NAV, but midPoint is very strong at handling different object types on the resource. But Im not sure whether this is the right way here. If user and account represent the same entity on the resource, you should probably join them together into single entity with attributes. Connector will contain the logic how to map this entity attributes to those two tables. M.</div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><table style="font-family:Verdana,Arial,Helvetica,sans-serif;border-collapse:collapse;padding:0px;margin:0px;border-width:0px!important;border-style:solid!important;width:482px!important"><tbody><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td colspan="2" style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;vertical-align:bottom;padding:0px;border:0px solid gray!important"><p><span style="font-size:14px;font-weight:bold">Martin Lízner</span><br>solution architect<br><br>gsm: [+420] 737 745 571<br>e-mail: <a href="mailto:martin.lizner@ami.cz" target="_blank">martin.lizner@ami.cz</a></p></td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important"> </td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px solid gray!important"> </td><td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;vertical-align:bottom;padding:0px;border:0px solid gray!important"><p>AMI Praha a.s.<br>Pláničkova 11<br>162 00 Praha 6<br>tel.: [+420] 274 783 239<br>web: <a href="http://www.ami.cz/" target="_blank">www.ami.cz</a></p></td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important"> </td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px solid gray!important"> </td><td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;margin:8px;border:0px solid gray!important"><p><img src="http://www.ami.cz/images/podpis/ami_logo.gif" alt="" style="border:0px"></p></td></tr><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td colspan="8" style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px solid gray!important"></td></tr><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td colspan="8" style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:11px;padding:0px;border:0px solid gray!important"><table style="font-family:Verdana,Arial,Helvetica,sans-serif;border-collapse:collapse;padding:0px;margin:0px;border-width:0px!important;border-style:solid!important;width:482px!important"><tbody><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td colspan="7" style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;width:480px;border:0px solid gray!important"><br><a href="http://www.skyidentity.com/" target="_blank"><img src="http://www.ami.cz/images/podpis/AMI-podpis-Sky.png" alt="AMI Praha a.s." style="border:0px;width:480px!important;height:82px!important"></a></td></tr><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td colspan="7" style="font-family:Arial,sans-serif;padding:0px;border:0px solid gray!important"><br></td></tr></tbody></table>Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za společnost AMI Praha a.s.<br>jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně písemnou formu.</td></tr></tbody></table></div><br></div></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote">2017-06-06 9:46 GMT+02:00 Stumpf Alexander <span dir="ltr"><<a href="mailto:Alexander.Stumpf@zeta.com" target="_blank">Alexander.Stumpf@zeta.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="DE-AT" link="#0563C1" vlink="#954F72">
<div class="m_-1915622821315916597WordSection1">
<p class="MsoNormal">Hello midpoint team,<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span lang="EN-GB">I started to create a Rest-based connector for Microsoft Dynamics NAV 2015. My first approach is to connect two Object classes of NAV: “Account” and “User”.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">I managed to create and Connector with all CRUD operation and used Testclasses to verify them successfully.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">But now I have a basic understanding problem in configure “Account and entitlements” in midpoint and would like to know, what a good practice could be.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">The tables in NAV are as follows:<u></u><u></u></span></p>
<p class="m_-1915622821315916597MsoListParagraph"><u></u><span lang="EN-GB"><span>1.<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><span lang="EN-GB">Account-table: A simple Account table with Identifier for user<u></u><u></u></span></p>
<p class="m_-1915622821315916597MsoListParagraph"><u></u><span lang="EN-GB"><span>2.<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><span lang="EN-GB">User-table: Connects the account Table 1 to specific company and to specific Rights. It is like an Access Control List. Here an example setup with columns<u></u><u></u></span></p>
<p class="m_-1915622821315916597MsoListParagraph" style="margin-left:72.0pt">
<u></u><span lang="EN-GB"><span>a.<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><span lang="EN-GB">User_ID: String – The ID from “Account-Table”<u></u><u></u></span></p>
<p class="m_-1915622821315916597MsoListParagraph" style="margin-left:72.0pt">
<u></u><span lang="EN-GB"><span>b.<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><span lang="EN-GB">CompanyName:String – a foreign key<u></u><u></u></span></p>
<p class="m_-1915622821315916597MsoListParagraph" style="margin-left:72.0pt">
<u></u><span lang="EN-GB"><span>c.<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><span lang="EN-GB">RightNo1: Boolean<u></u><u></u></span></p>
<p class="m_-1915622821315916597MsoListParagraph" style="margin-left:72.0pt">
<u></u><span lang="EN-GB"><span>d.<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><span lang="EN-GB">RightNo2: Boolean<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">The cardinality is Account:User_ID (1 : N) User-table:User_ID, where User_ID and CompanyName are a constraint key.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">Setting up the resource in Midpoint for the table “Account” was no problem. The midpoint user is connected to the NAV account. CRUD Operations work.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">But what is a good setup for the “User-Table”?<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">The behaviour I want:<u></u><u></u></span></p>
<p class="m_-1915622821315916597MsoListParagraph" style="margin-left:53.25pt">
<u></u><span lang="EN-GB"><span>-<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><span lang="EN-GB">When assigning a (company specific) role to a user, an entry in “User-Table” is created (I think it is inducement – with generic construction)<u></u><u></u></span></p>
<p class="m_-1915622821315916597MsoListParagraph" style="margin-left:53.25pt">
<u></u><span lang="EN-GB"><span>-<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><span lang="EN-GB">When assigning another role, a “Right”:Boolean is set.<u></u><u></u></span></p>
<p class="m_-1915622821315916597MsoListParagraph" style="margin-left:53.25pt">
<u></u><span lang="EN-GB"><span>-<span style="font:7.0pt "Times New Roman"">
</span></span></span><u></u><span lang="EN-GB">When the (company specific) role is removed, the entry in the “User-Table” should be deleted<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">I already tried a dozen of setups (as entitlement, as Account, as entitlement linked to user…, I do not want to write them all down, assuming nobody will want to read the whole story) but I did not get by.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">One more Info: I have NOT set up an entitlement association yet, because I have not programmed a multiValue field that could be used as an “association field” yet. Should I, or can I use the “User_ID” field of User-table?<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">If you could give me any advice, I would be very happy.
<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">Thank you in advance<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">Alex<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:gray">B.Sc. Alexander Stumpf<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:gray">System Development<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><b><span lang="EN-GB" style="font-family:"Arial",sans-serif;color:blue">ZETA Automation GmbH</span></b><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:gray">Münchner Str. 8, D-85354 Freising<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:gray">P <a href="tel:+49%208161%209921649" value="+4981619921649" target="_blank">+49 (8161) 99 21-649</a></span><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#ff6600"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:gray">F <a href="tel:+49%208161%209921644" value="+4981619921644" target="_blank">+49 (8161) 99 21-644</a><u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="DE" style="font-size:10.0pt;font-family:"Arial",sans-serif"><a href="mailto:alexander.stumpf@zeta.com" target="_blank"><span lang="EN-US" style="color:blue">alexander.stumpf@zeta.com</span></a></span><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><u><span lang="DE" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:blue"><a href="http://www.zeta-automation.de/" target="_blank"><span style="color:blue">http://www.zeta-automation.de</span></a></span></u><span lang="DE" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="DE" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="DE" style="font-size:7.0pt;font-family:"Arial",sans-serif;color:gray">HRB 115294, Amtsgericht München; UST-Id. Nr. DE 189564479,<br>
Geschäftsführung: Mag. René Haas, Dipl.-Ing. </span><span lang="EN-US" style="font-size:7.0pt;font-family:"Arial",sans-serif;color:gray">Dr. Andreas Marchler<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:7.0pt;font-family:"Arial",sans-serif;color:gray"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:7.0pt;font-family:"Arial",sans-serif;color:gray"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:7.5pt;font-family:"Arial",sans-serif;color:black">:Disclaimer:<br>
</span></b><span lang="EN-US" style="font-size:7.5pt;font-family:"Arial",sans-serif;color:black"><br>
The information contained in this e-mail and in any attached files is confidential and/or legally privileged. If you are not the intended recipient, please contact the sender and delete this e-mail. Any unauthorised copying or distribution of the information
contained in this e-mail and/or in any attached file is prohibited. The sender and/or the sending company do not accept liability for the incorrect and/or incomplete transmission of the information, nor for any delay or interruption of the transmission, nor
for the damages arising from the use of or reliance on the information unless mandatory law provides otherwise. E-mails may be interfered with, may contain computer viruses or other defects. The sender and/or the sending company give no warranties and do not
accept liability in relation to these matters, unless mandatory law provides otherwise.
</span><span lang="DE" style="font-size:7.5pt;font-family:"Arial",sans-serif;color:black">Thank you for your cooperation.</span><span><u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br></div>