<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; color: rgb(39, 93, 144);" class="">
Good evening here,</div>
<div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; color: rgb(39, 93, 144);" class="">
<br class="">
</div>
<div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; color: rgb(39, 93, 144);" class="">
Why don’t you use a O36 group to assign the license? You can control this group membership using midpoint and let dirsync sync to the cloud. See <a href="https://docs.microsoft.com/en-us/azure/active-directory/active-directory-licensing-group-assignment-azure-portal" class="">https://docs.microsoft.com/en-us/azure/active-directory/active-directory-licensing-group-assignment-azure-portal</a></div>
<div style="margin: 0px; font-stretch: normal; line-height: normal; font-family: "Times New Roman"; min-height: 15px;" class="">
<br class="">
</div>
<div class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
Best regards,<br class="Apple-interchange-newline">
Davy Priem<br class="">
<b class="">Coördinator IT technical management</b><br class="">
<br class="">
Hogeschool VIVES | Dienst IT<br class="">
Doorniksesteenweg 145 | 8500 Kortrijk<br class="">
tel. + 32 56 27 05 61 <br class="">
<a href="mailto:davy.priem@vives.be" class="">e-mail davy.priem@vives.be</a> <br class="">
</div>
<span style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><br class="Apple-interchange-newline" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;">
<span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><span><span><img apple-inline="yes" id="8DDB50CA-8B0D-4E39-8B86-0EF1F2EADFD1" src="cid:image001.png@01D3B235.4487FD10" class=""></span>
</span></span></span></div>
<div><br class="">
<blockquote type="cite" class="">
<div class="">Op 13 jun. 2018, om 22:12 heeft Devin Rosenbauer <<a href="mailto:devin@identityworksllc.com" class="">devin@identityworksllc.com</a>> het volgende geschreven:</div>
<br class="Apple-interchange-newline">
<div class="">
<div dir="ltr" class="">
<div class="">Good afternoon,</div>
<div class=""><br class="">
</div>
<div class="">I'm in the training with Ivan and he suggested I sent this off to the mailing list. The situation, which has come up several times in my corporate Oracle IDM projects, is Microsoft's Exchange
<a href="https://technet.microsoft.com/en-us/library/jj200581(v=exchg.150).aspx" class="">
hybrid installation mode</a>.<br class="">
</div>
<div class=""><br class="">
</div>
<div class="">An account is created in local Active Directory and flagged as a remote mail user. This is typically done with PowerShell. A scheduled Microsoft process runs on the domain controller (every 30 minutes by default) that creates or updates an Azure
AD account and O365 mailbox for remote mail users in the cloud. This process is called DirSync.</div>
<div class=""><br class="">
</div>
<div class=""><i class="">After</i> DirSync runs, we need to provision a license for the user in O365. This is done either via the Graph REST API or via another set of PowerShell commands. The license setup cannot be run before DirSync because the user doesn't
exist in O365 yet.<br class="">
</div>
<div class=""><br class="">
</div>
<div class="">Here's how I've resolved this in OIM: After the AD PowerShell commands, I set a flag on the
<i class="">user</i> in OIM to mark them as needing a license. A custom scheduled job (just some Java code) in OIM attempts to provision the license for the each user with the flag set. If the license is successfully added, the user is un-flagged. If the license
is NOT successfully added, the user retains the flag and we try again.</div>
<div class=""><br class="">
</div>
<div class="">Could something like this be done in Midpoint?</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
-- <br class="">
<div class="gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr" class="">Devin Rosenbauer<br class="">
Principal Consultant<br class="">
Identity Works LLC<br class="">
+1 585 210 3201<br class="">
</div>
</div>
</div>
</div>
_______________________________________________<br class="">
midPoint mailing list<br class="">
<a href="mailto:midPoint@lists.evolveum.com" class="">midPoint@lists.evolveum.com</a><br class="">
http://lists.evolveum.com/mailman/listinfo/midpoint<br class="">
</div>
</blockquote>
</div>
<br class="">
</body>
</html>