<html><body><div style="font-family: times new roman, new york, times, serif; font-size: 12pt; color: #000000"><div>Hi Daniel,<br></div><div><br></div><div>I have just reproduced it with recent 3.6 SNAPSHOT and it looks like you've hit a bug. I have created <a href="https://jira.evolveum.com/browse/MID-4021">https://jira.evolveum.com/browse/MID-4021</a> - feel free to add to watchers. Also if there is anything missing in the issue description feel free to update.<br></div><div><br></div><div>Thank you for reporting!<br></div><div><br></div><div>Best regards,<br></div><div>Ivan<br></div><div><br></div><hr id="zwchr"><blockquote style="border-left:2px solid #1010FF;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>"Daniel Sommer" <Daniel.Sommer@itconcepts.net><br><b>To: </b>midpoint@lists.evolveum.com<br><b>Sent: </b>Tuesday, June 27, 2017 4:24:57 PM<br><b>Subject: </b>[midPoint] Midpoint Concept What is vs. What should be - towards account entitlements<br><div><br></div><span data-mce-style="font-family: Default Sans Serif,Verdana,Arial,Helvetica,sans-serif; font-size: small;" style="font-family: Default Sans Serif,Verdana,Arial,Helvetica,sans-serif; font-size: small;" size="2">Hello,<div><br></div><div><br></div><div>we have connected Midpoint to an active directory. It has accounts and group entitlements. We are able to set accounts to users (and the group to a role).</div><div>We can assign such entitlement to a user by adding a role with specific second order inducement. So far, so good.</div><div><br></div><div>Now we set the value in the config object to "none": "<span style="font-family: "Courier New"; font-size: 12.8px; font-weight: bold;"><span data-mce-style="color: #008000;" style="color: #008000;">globalAccountSynchronizationSettings/</span></span><span style="font-family: "Courier New"; font-size: 12.8px; font-weight: bold;"><span data-mce-style="color: #008000;" style="color: #008000;">assignmentPolicyEnforcement"</span></span></div><div><span style="font-family: "Courier New"; font-size: 12.8px; font-weight: bold;"><span data-mce-style="color: #008000;" style="color: #008000;"><br></span></span></div><div><span style="font-size: 12.8px;">If we now remove the role for the user again, the accounts (projections) stay - as expected. But what gets lost is the entitlement !</span></div><div><span style="font-size: 12.8px;"><br></span></div><div><span style="font-size: 12.8px;">The user is not in a group anymore. So what is the problem:</span></div><div><span style="font-size: 12.8px;"><br></span></div><div><span style="font-size: 12.8px;"><br></span></div><div><span style="font-size: 12.8px;">Does not apply your concept of what is and should be to entitlements?</span></div><div><span style="font-size: 12.8px;"><br></span></div><div><span style="font-size: 12.8px;">Is there a place in shadows or similar where the (real what is) state is saved within midpoint towards account entitlements (group memberships)?</span></div><div><span style="font-size: 12.8px;"><br></span></div><div><span style="font-size: 12.8px;"><br></span></div><div><span style="font-size: 12.8px;">Best regards and thx in advance,</span></div><div><span style="font-size: 12.8px;"><br></span></div><div><span style="font-size: 12.8px;"><br></span></div><div><span style="font-size: 12.8px;">Daniel</span></div><div><br></div><div></div></span>
<p><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);">Daniel Sommer <br>
Office: +49 228 908733 0 </span></span><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);">| </span></span><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);">Fax: +49 228 908733 1</span></span><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);"> | Mobil: +49 176 162086 79</span></span></p>
<p><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);">ITConcepts Professional GmbH - In den Dauen 6 - DE 53117 Bonn</span></span></p>
<p><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);">Website </span></span><span style="color: rgb(153, 153, 153);"><a href="http://www.itconcepts.net" target="_blank"><span style="font-family: Arial;">www.itconcepts.net</span></a><br>
<br>
<a href="http://www.itconcepts.net/" target="_blank"><img src="cid:pYtInVIVXLM8JbEziSE1EtziJ@06qbEndsTgEtzpmO8jrPxxe0A" alt="" border="0"></a> <a href="http://www.itconcepts.net/index.php/about-cognitum" target="_blank"><img src="cid:56Vt-qg8UihguG_CrGJ-tfStN@jFnoi9WgFyOhS3O8acRDuEMjP" alt="" border="0"></a><br>
Besuchen Sie uns auch auf <a href="http://www.xing.com/companies/itconceptsprofessionalgmbh/updates" target="_blank"><img src="cid:biaqcgk=gxJxImHbeWe-dvxfc@jtnd2GXHuiftD3laHfLMyrPVT" alt="" border="0"></a> <a href="http://www.linkedin.com/company/itconcepts" target="_blank"><img src="cid:-Ij_dRoivEebp1DE32TLmGHxO@bMWTtrLjHhlL4cBoir_hG09rX" alt="" border="0"></a></span> <a href="https://www.facebook.com/ITConcepts-Karriere-274907129252667/" target="_blank"><img style="border-width: 0px; border-style: solid;" src="cid:XieatZ3L=yBa3EZ7Uo6_98Wee@Upd_8=F13qf=TgTmJjFRyoUqD" width="20" height="20"></a> <a href="https://twitter.com/ITConceptsJobs" target="_blank"><img style="border-width: 0px; border-style: solid;" src="cid:fUILHqV6btUq8xj3uhM6u23JQ@cHpwBVL3Cq9STZcnTf5bwSMIR" width="20" height="20"></a><br data-mce-bogus="1"></p>
<p><span style="display: none;"> </span><span style="color: rgb(169, 169, 169);"><span style="font-size: 12px;">Events mit ITConcepts</span></span><span style="font-size: 12px;"><span style="color: rgb(169, 169, 169);"><span data-mce-style="font-family: Arial;" style="font-family: Arial;"><span data-mce-style="font-family: Arial;" style="font-family: Arial;"><span data-mce-style="font-family: Arial;" style="font-family: Arial;"> </span></span></span></span><span data-mce-style="color: #a2a2a2; font-family: Arial;" style="color: #a2a2a2; font-family: Arial;" color="#a2a2a2"><span data-mce-style="color: #a2a2a2; font-family: Arial;" style="color: #a2a2a2; font-family: Arial;" color="#a2a2a2"><span data-mce-style="color: #a2a2a2; font-family: Arial;" style="color: #a2a2a2; font-family: Arial;" color="#a2a2a2"> </span></span></span><span data-mce-style="color: #a2a2a2; font-family: Arial;" style="color: #a2a2a2; font-family: Arial;" color="#a2a2a2"><span data-mce-style="color: #a2a2a2; font-family: Arial;" style="color: #a2a2a2; font-family: Arial;" color="#a2a2a2"><span data-mce-style="color: #a2a2a2; font-family: Arial;" style="color: #a2a2a2; font-family: Arial;" color="#a2a2a2">.</span></span></span></span><br>
<span style="font-size: 12px;"><span data-mce-style="color: #a2a2a2; font-family: Arial;" style="color: #a2a2a2; font-family: Arial;" color="#a2a2a2"><span data-mce-style="color: #a2a2a2; font-family: Arial;" style="color: #a2a2a2; font-family: Arial;" color="#a2a2a2"><span data-mce-style="color: #a2a2a2; font-family: Arial;" style="color: #a2a2a2; font-family: Arial;" color="#a2a2a2">29. Juni: IT Security Management & Technology Conference 2017 in Hanau. Mehr Infos </span></span></span><a href="http://www.itconcepts.de/index.php/itconcepts-events/details/72-it-security-conference" target="_blank"><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"><span data-mce-style="color: #0000ff; font-family: Arial;" style="color: #0000ff; font-family: Arial;" color="#0000ff"><span data-mce-style="color: #0000ff; font-family: Arial;" style="color: #0000ff; font-family: Arial;" color="#0000ff"><span data-mce-style="color: #0000ff; font-family: Arial;" style="color: #0000ff; font-family: Arial;" color="#0000ff">hier:</span></span></span></span></a><span data-mce-style="font-family: Helv;" style="font-family: Helv;"><span data-mce-style="font-family: Helv;" style="font-family: Helv;"> </span></span><br>
<span data-mce-style="color: #a2a2a2; font-family: Arial;" style="color: #a2a2a2; font-family: Arial;" color="#a2a2a2"><span data-mce-style="color: #a2a2a2; font-family: Arial;" style="color: #a2a2a2; font-family: Arial;" color="#a2a2a2"><span data-mce-style="color: #a2a2a2; font-family: Arial;" style="color: #a2a2a2; font-family: Arial;" color="#a2a2a2">13. Juli: IT Security Management & Technology Conference 2017 in Hamburg. Mehr Infos </span></span></span><a href="http://www.itconcepts.de/index.php/itconcepts-events/details/75-it-security-conference" target="_blank"><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"><span data-mce-style="color: #0000ff; font-family: Arial;" style="color: #0000ff; font-family: Arial;" color="#0000ff"><span data-mce-style="color: #0000ff; font-family: Arial;" style="color: #0000ff; font-family: Arial;" color="#0000ff"><span data-mce-style="color: #0000ff; font-family: Arial;" style="color: #0000ff; font-family: Arial;" color="#0000ff">hier:</span></span></span></span></a><span data-mce-style="font-family: Helv;" style="font-family: Helv;"><span data-mce-style="font-family: Helv;" style="font-family: Helv;"> </span></span></span></p>
<p><span style="font-size: x-small;"><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);">ITConcepts Professional GmbH Gf.: Sven Moog, Sitz Bonn, AG Bonn HRB 12947 - Ust-Id Nr: DE211482933<br>
ITConcepts Automotive GmbH Gf.: Sven Moog, Sitz Wolfsburg, AG Braunschweig HRB 204188 - Ust-Id Nr: DE223888748<br>
ITConcepts Operations GmbH Gf.: Sven Moog, Sitz Bonn, AG Bonn HRB 15454 - St.-Nr: 205/5726/0602</span></span></span></p>
<p><span style="font-size: x-small;"><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);">Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind<br>
oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail.<br>
Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser E-Mail sind nicht gestattet.</span></span></span></p>
<p><span style="font-size: x-small;"><span style="font-family: Arial;"><span style="color: rgb(153, 153, 153);">This e-mail may contain confidential and/or privileged information. If you are not the intended recipient<br>
(or have received this e-mail in error) please notify the sender immediately and destroy this e-mail.</span><br>
<span style="color: rgb(153, 153, 153);">Any unauthorised copying, disclosure or distribution of the material in this e-mail is strictly forbidden.</span></span></span></p>
<br>_______________________________________________<br>midPoint mailing list<br>midPoint@lists.evolveum.com<br>http://lists.evolveum.com/mailman/listinfo/midpoint<br></blockquote><div><br><br></div><div><br></div><div>-- <br></div><div><span name="x"></span>Ivan Noris<br>Senior Identity Engineer<br>evolveum.com<span name="x"></span><br></div></div></body></html>