<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <p>Hi,</p>
    <p>first you need to answer the question:</p>
    <p>Is the resource authoritative for the account->user creation
      or not?</p>
    <p>If the resource is authoritative, you probably want to have
      UNMATCHED situation with addFocus reaction.</p>
    <p>If the resource is not authoritative, you probably don't want to
      have UNMATCHED situation with addFocus reaction. But this
      effectively means, that the resource contains accounts and
      midPoint cannot correlate them to any of the users in midPoint. If
      another resource is authoritative for owners of that accounts, you
      should first reconcile/synchronize with that resource and then
      reconcile this one.</p>
    <p>Or there is a chance that your correlation expression is just
      incorrect and cannot find the owners even if you know that it
      should. If you want to link them, you (midPoint) first needs to
      know to what users (owners) should the accounts be linked. That is
      decided by the correlation expression. (Or you can define owners
      manually if there if no possibility to do it automatically as
      Gustav said few emails ago).<br>
    </p>
    <p>UNMATCHED means that midPoint does not know to which user should
      be the account linked. So either the correlation expression is
      incorrect, or there is really no owner of that account.</p>
    <p>Best regards,</p>
    <p>Ivan<br>
    </p>
    <br>
    <div class="moz-cite-prefix">On 23.11.2017 14:20, Alcides Carlos de
      Moraes Neto wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CAMLLNm=c+to+VXh5jQE-gCv9oKEbNvaZv_9aCTipGk14sp2v9A@mail.gmail.com">
      <div dir="ltr">
        <div>Thank you Ivan.<br>
          <br>
        </div>
        But what if I don't want to create users from this resource? I
        just want to link them, my users are being created from another
        resource.<br>
      </div>
      <div class="gmail_extra"><br>
        <div class="gmail_quote">2017-11-23 9:14 GMT-02:00 Ivan Noris <span
            dir="ltr"><<a href="mailto:ivan.noris@evolveum.com"
              target="_blank" moz-do-not-send="true">ivan.noris@evolveum.com</a>></span>:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div text="#000000" bgcolor="#FFFFFF">
              <p>Hi,</p>
              <p>for Unmatched, the reaction should be addFocus to
                create users from the accounts.</p>
              <p>You also need to have inbound mappings to construct the
                user attribute values.</p>
              <p>Ivan<br>
              </p>
              <div>
                <div class="h5"> <br>
                  <div class="m_9139339421050875934moz-cite-prefix">On
                    22.11.2017 18:28, Alcides Carlos de Moraes Neto
                    wrote:<br>
                  </div>
                </div>
              </div>
              <blockquote type="cite">
                <div>
                  <div class="h5">
                    <div dir="ltr">
                      <div>
                        <div>
                          <div>Hello List,<br>
                            <br>
                          </div>
                          I have a resource that correlates to Users,
                          but does not create them. After the first time
                          import, users were correctly correlated and
                          linked, so the correlation expression is
                          correct.<br>
                          <br>
                        </div>
                        However, some accounts were left as Unmatched.
                        That was expected, since I did not import all
                        users yet. But after importing the remaining
                        users, I'm not able to link the remaining
                        accounts. I tried both Import and Reconcile
                        Tasks of the Resource, and both of them numbers
                        all accounts as "Not applicable for task".</div>
                      <div><br>
                      </div>
                      <div>I thought I had to add a "Unmatched" reaction
                        to the Synchronization object. I had only
                        Unlinked -> Link reaction. So I added
                        Unmatched -> Link, but that did not change
                        anything.</div>
                      <div><br>
                      </div>
                      <div>What am I doing wrong?</div>
                      <div><br>
                      </div>
                    </div>
                    <br>
                    <fieldset
                      class="m_9139339421050875934mimeAttachmentHeader"></fieldset>
                    <br>
                  </div>
                </div>
                <span class="">
                  <pre>______________________________<wbr>_________________
midPoint mailing list
<a class="m_9139339421050875934moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank" moz-do-not-send="true">midPoint@lists.evolveum.com</a>
<a class="m_9139339421050875934moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank" moz-do-not-send="true">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a>
</pre>
                </span></blockquote>
              <span class="HOEnZb"><font color="#888888"> <br>
                  <pre class="m_9139339421050875934moz-signature" cols="72">-- 
Ivan Noris
Senior Identity Engineer
<a href="http://evolveum.com" target="_blank" moz-do-not-send="true">evolveum.com</a>
</pre>
                </font></span></div>
            <br>
            ______________________________<wbr>_________________<br>
            midPoint mailing list<br>
            <a href="mailto:midPoint@lists.evolveum.com"
              moz-do-not-send="true">midPoint@lists.evolveum.com</a><br>
            <a
              href="http://lists.evolveum.com/mailman/listinfo/midpoint"
              rel="noreferrer" target="_blank" moz-do-not-send="true">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a><br>
            <br>
          </blockquote>
        </div>
        <br>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
    </blockquote>
    <br>
    <pre class="moz-signature" cols="72">-- 
Ivan Noris
Senior Identity Engineer
evolveum.com
</pre>
  </body>
</html>