<div dir="ltr"><div>Hi Oskar,</div><div><br></div><div>I just find how to do this. Thanks for you help!</div><div>I post it here, in case anyone needed them. And they are much simpler them I thought.<br></div><div><br></div><div>There is 3 inducement needed. This role is assigned to both Org and User.<br></div><div><br></div><div>1) map Org to AD group, which work before</div><div> <inducement id="1"><br> <construction><br> <resourceRef oid="AD-connector-resource"<br> relation="org:default"<br> type="c:ResourceType"></resourceRef><br> <kind>generic</kind><br> <intent>organization</intent><br> </construction><br> <focusType>OrgType</focusType><br> </inducement><br><br></div><div>2) map Org assignment to AD group membership<br></div><div> <inducement id="2"><br> <construction><br> <resourceRef oid="AD-connector-resource"<br> relation="org:default"<br> type="c:ResourceType"></resourceRef><br> <kind>generic</kind><br> <intent>organization</intent><br> <association><br> <c:ref>ri:group</c:ref><br> <outbound><br> <strength>strong</strength><br> <expression><br> <associationFromLink xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"<br> xsi:type="c:AssociationFromLinkExpressionEvaluatorType"><br> <projectionDiscriminator><br> <kind>generic</kind><br> <intent>organization</intent><br> </projectionDiscriminator><br> </associationFromLink><br> </expression><br> </outbound><br> </association><br> </construction><br> <order>2</order><br> <focusType>OrgType</focusType><br> </inducement><br></div><div><br></div><div>3) map User Accounts to AD Org group</div><div><br></div><div> <inducement id="3"><br> <construction><br> <resourceRef oid="AD-connector-resource"<br> relation="org:default"<br> type="c:ResourceType"></resourceRef><br> <kind>account</kind><br> <intent>default</intent><br> <association><br> <c:ref>ri:group</c:ref><br> <outbound><br> <strength>strong</strength><br> <expression><br> <associationFromLink xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"<br> xsi:type="c:AssociationFromLinkExpressionEvaluatorType"><br> <projectionDiscriminator><br> <kind>generic</kind><br> <intent>organization</intent><br> </projectionDiscriminator><br> </associationFromLink><br> </expression><br> </outbound><br> </association><br> </construction><br> <order>3</order><br> <focusType>UserType</focusType><br> </inducement><br><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jul 26, 2018 at 2:05 PM, Ian Chen <span dir="ltr"><<a href="mailto:ianchen.op@gmail.com" target="_blank">ianchen.op@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hi Oskar,</div><div><br></div><div>The first inducement works fine, group gets created in AD for those Org with Role assigned. Thanks!</div><div><br></div><div>But second inducement has no effect, and looks like putting a Account to Org group.</div><div><br></div><div>I'm trying to map Org to AD group, which should result in groups in groups.</div><div>In my understanding Org relationship in midpoint is child to parent (child Org assigned to parent Org), while in AD group membership is parent to child (parent group has member attribute holding child group dn).</div><div>It looks only Association provide this object to subject mapping. But I cannot find document or previous discussion over this beside the blog page.<br></div><div><br></div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Jul 25, 2018 at 10:46 PM, Oskar Butovič - AMI Praha a.s. <span dir="ltr"><<a href="mailto:oskar.butovic@ami.cz" target="_blank">oskar.butovic@ami.cz</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi Ian.<div><br></div><div>I suggest you use type generic instead of entitlement. (don't know why. It just started working)</div><div><br></div><div>I don't think that association will work in this case. You probably should try construction of the DN attribute. like this:<br></div><div><br></div><div><div><inducement></div><div> <construction></div><div> <resourceRef oid="AD-connector-resource" type="c:ResourceType"/></div><div> <kind>generic</kind></div><div> <intent>organization</intent></div><div> </construction></div><div> </inducement></div><div> <inducement></div><div><span style="white-space:pre-wrap"> </span> <construction></div><div><span style="white-space:pre-wrap"> </span> <resourceRef oid="AD-connector-resource" type="c:ResourceType"/></div><span><div><span style="white-space:pre-wrap"> </span> <kind>account</kind></div><div><span style="white-space:pre-wrap"> </span> <intent>default</intent></div></span><div><span style="white-space:pre-wrap"> </span> <attribute></div><div><span style="white-space:pre-wrap"> </span> <c:ref>ri:dn</c:ref></div><div><span style="white-space:pre-wrap"> </span> <outbound></div><div><span style="white-space:pre-wrap"> </span> <strength>strong</strength></div><div><span style="white-space:pre-wrap"> </span> <source></div><div> <c:path>$immediateRole/extens<wbr>ion/ADpath</c:path></div><div> <span style="white-space:pre-wrap"> </span> </source></div><div> <span style="white-space:pre-wrap"> </span> <source></div><div><span style="white-space:pre-wrap"> </span> <c:path>$focus/extension/uniqu<wbr>eFullName</c:path></div><div><span style="white-space:pre-wrap"> </span> </source></div><div><span style="white-space:pre-wrap"> </span> <expression></div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span><script></div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span><code></div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span>import javax.xml.namespace.QName;</div><div><span style="white-space:pre-wrap"> </span> import com.evolveum.midpoint.xml.ns._<wbr>public.common.common_3.OrgType<wbr>;</div><div><span style="white-space:pre-wrap"> </span> import com.evolveum.midpoint.util.exc<wbr>eption.ObjectNotFoundException<wbr>;</div><div><span style="white-space:pre-wrap"> </span> </div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span>result = null;</div><div><span style="white-space:pre-wrap"> </span> </div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span>defaultOu = "$(ADresource.defaultOuForUser<wbr>s)" </div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span>defaultOu += ",$(ADresource.baseContext)";</div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span>defaultOu = 'CN=' + uniqueFullName + ',' + defaultOu;</div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span></div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span>if(ADpath != null){</div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span>result = 'CN=' + uniqueFullName + ',' + ADpath;</div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span>}else{</div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span>result = defaultOu;</div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span>}</div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span></div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span><a href="http://log.info" target="_blank">log.info</a>("org is putting user " + uniqueFullName + " into AD with DN: " + result);</div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span>return result;</div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span></code></div><div><span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span></script></div><div><span style="white-space:pre-wrap"> </span> </expression></div><div><span style="white-space:pre-wrap"> </span> </outbound></div><div><span style="white-space:pre-wrap"> </span> </attribute></div><div><span style="white-space:pre-wrap"> </span> </construction></div><div><span style="white-space:pre-wrap"> </span> <order>2</order></div><div><span style="white-space:pre-wrap"> </span> <focusType>UserType</focusType<wbr>></div><div><span style="white-space:pre-wrap"> </span> </inducement></div></div></div><div class="m_-5666663834610401219HOEnZb"><div class="m_-5666663834610401219h5"><div class="gmail_extra"><br><div class="gmail_quote">2018-07-25 12:34 GMT+02:00 Ian Chen <span dir="ltr"><<a href="mailto:ianchen.op@gmail.com" target="_blank">ianchen.op@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hi Oskar,</div><div><br></div><div>Thanks for your reply. After many month, I get to work on this again.</div><div><br></div><div>I tried, the following will map a midpoint user's AD account to an AD group.<br></div><div><span><div><inducement></div><div> <construction></div><div> <resourceRef oid="AD-resource"</div><div> relation="<span class="m_-5666663834610401219m_-8409370931716996937m_-2209458879720677481gmail-il">org</span>:default"</div><div> type="c:ResourceType"></resour<wbr>ceRef></div><div> <kind>account</kind></div><div> <intent>default</intent></div><div><br></div></span><div>I'm trying to map ORG to AD groups with parents/member correctly set as in <a href="https://evolveum.com/blog/practical-organization-structure-in-active-directory/" target="_blank">https://evolveum.com/blog/prac<wbr>tical-organization-structure-i<wbr>n-active-directory/</a><br></div><div><br></div><div> <objectType><br> <kind>entitlement</kind><br> <intent>ou</intent><br> <default>false</default><br> <objectClass>ri:group</objectC<wbr>lass><br> <attribute><br>... <br></div><div> </attribute><span><br> <association><br> <c:ref>ri:group</c:ref><br></span> <displayName>OU Group</displayName><br> <tolerant>true</tolerant><br> <exclusiveStrong>true</exclusi<wbr>veStrong><br> <kind>entitlement</kind><br> <intent>ou</intent><span><br> <direction>objectToSubject</di<wbr>rection><br> <associationAttribute>ri:membe<wbr>r</associationAttribute><br> <valueAttribute>ri:dn</valueAt<wbr>tribute><br> <shortcutAssociationAttribute><wbr>ri:memberOf</shortcutAssociati<wbr>onAttribute><br> <shortcutValueAttribute>ri:dn<<wbr>/shortcutValueAttribute><br> <explicitReferentialIntegrity><wbr>false</explicitReferentialInte<wbr>grity><br> </association><br></span> </objectType><br><br></div><div> <inducement id="1"><br> <construction><br> <resourceRef oid="OID"<span><br> relation="org:default"<br> type="c:ResourceType"></resour<wbr>ceRef><br></span> <kind>entitlement</kind><br> <intent>ou</intent><span><br> <association><br> <c:ref>ri:group</c:ref><br> <outbound><br> <strength>strong</strength><br> <expression><br> <associationFromLink xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/2<wbr>001/XMLSchema-instance</a>"<br> <wbr> xsi:type="c:AssociationFromLin<wbr>kExpressionEvaluatorType"><br> <projectionDiscriminator><br> <kind>entitlement</kind><br></span> <intent>ou</intent><span><br> </projectionDiscriminator><br> </associationFromLink><br> </expression><br> </outbound><br> </association><br> </construction><br></span> </inducement><br><br></div><div>Assigning this role on a ORG: <br></div><div>could not extract ResultSet</div><div><dd style="box-sizing:border-box;line-height:1.42857;margin-left:130px;color:rgb(51,51,51);font-family:"Source Sans Pro","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:14px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><br></dd><span style="color:rgb(51,51,51);font-family:monospace;font-size:11px;white-space:pre-wrap;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;display:inline;float:none">Caused by: java.sql.SQLException: You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near ')) and rshadow0_.resourceRef_targetOi<wbr>d='OID' an' at line 1
Query is: select count(rshadow0_.oid) as col_0_0_ from m_shadow rshadow0_ inner join m_object rshadow0_1_ on rshadow0_.oid=rshadow0_1_.oid where (rshadow0_.oid in ()) and rshadow0_.resourceRef_targetOi<wbr>d=? and (rshadow0_.resourceRef_relatio<wbr>n in (? , ?)) and rshadow0_.kind=? and rshadow0_.intent=?, parameters ['OID','#','<a href="http://midpoint.evolveum.com/xml/ns/public/common/org-3#default" target="_blank">http://midpoint.ev<wbr>olveum.com/xml/ns/public/commo<wbr>n/org-3#default</a>',1,'ou']</span><br class="m_-5666663834610401219m_-8409370931716996937m_-2209458879720677481gmail-Apple-interchange-newline"></div><div><br></div>Induce this role on a ORG: <br></div><div>No error, but no group created</div><div><br></div><div><br></div></div><div class="m_-5666663834610401219m_-8409370931716996937HOEnZb"><div class="m_-5666663834610401219m_-8409370931716996937h5"><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Oct 31, 2017 at 5:30 PM, Oskar Butovič - AMI Praha a.s. <span dir="ltr"><<a href="mailto:oskar.butovic@ami.cz" target="_blank">oskar.butovic@ami.cz</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div>something like this inside your schema handling in your active directory resource could do the trick.</div><div><br></div><div><objectType></div><div> <kind>entitlement</kind></div><div> <intent>group</intent></div><div> <displayName>AD Group</displayName></div><div> <default>true</default></div><div> <objectClass>ri:group</object<wbr>Class></div></div><div>...</div><div>...</div><div> <association></div><div> <c:ref>ri:group</c:ref></div><div> <displayName>AD Group Membership</displayName></div><div> <kind>entitlement</kind></div><div> <intent>group</intent></div><div> <direction>objectToSubject</di<wbr>rection></div><div> <associationAttribute>ri:membe<wbr>r</associationAttribute></div><div> <valueAttribute>ri:dn</valueAt<wbr>tribute></div><div> <shortcutAssociationAttribute><wbr>ri:memberOf</shortcutAssociati<wbr>onAttribute></div><div> <shortcutValueAttribute>ri:dn<<wbr>/shortcutValueAttribute></div><div> <explicitReferentialIntegrity><wbr>false</explicitReferentialInte<wbr>grity></div><div> </association></div><div>...</div><div>...</div><div></objectType></div><div><br></div><div>next thing you need is inducement on meta-role like:</div><div><div><inducement></div><div> <construction></div><div> <resourceRef oid="AD-resource"</div><div> relation="org:default"</div><div> type="c:ResourceType"></resour<wbr>ceRef></div><div> <kind>account</kind></div><div> <intent>default</intent></div><div> <association></div><div> <c:ref>ri:group</c:ref></div><div> <outbound></div><div> <strength>strong</strength></div><div> <expression></div><div> <associationFromLink xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/2<wbr>001/XMLSchema-instance</a>"</div><div> xsi:type="c:AssociationFromLi<wbr>nkExpressionEvaluatorType"></div><div> <projectionDiscriminator></div><div> <kind>entitlement</kind></div><div> <intent>group</intent></div><div> </projectionDiscriminator></div><div> </associationFromLink></div><div> </expression></div><div> </outbound></div><div> </association></div><div> </construction></div><div> <order>2</order></div><div> </inducement></div></div><div><br></div><div>for further info look at the link to wiki I sent you.</div><div><br></div><div>Best Regards</div><span class="m_-5666663834610401219m_-8409370931716996937m_-2209458879720677481HOEnZb"><font color="#888888"><div>Oskar Butovič</div><div><br></div></font></span></div><div class="m_-5666663834610401219m_-8409370931716996937m_-2209458879720677481HOEnZb"><div class="m_-5666663834610401219m_-8409370931716996937m_-2209458879720677481h5"><div class="gmail_extra"><br><div class="gmail_quote">2017-10-31 7:55 GMT+01:00 Ian Chen <span dir="ltr"><<a href="mailto:ianchen.op@gmail.com" target="_blank">ianchen.op@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi Oskar,<div><br></div><div>I mapped all org to Entitlement as AD groups.</div><div>But I cannot find how to map parent org of assignment, could you share some details?</div><div>Thanks.</div><div><br></div><div>Regards,</div><div>Ian</div></div><div class="m_-5666663834610401219m_-8409370931716996937m_-2209458879720677481m_-5335298883541267736HOEnZb"><div class="m_-5666663834610401219m_-8409370931716996937m_-2209458879720677481m_-5335298883541267736h5"><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Oct 25, 2017 at 6:33 PM, Oskar Butovič - AMI Praha a.s. <span dir="ltr"><<a href="mailto:oskar.butovic@ami.cz" target="_blank">oskar.butovic@ami.cz</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi Chen,<div><br></div><div>I suggest mapping this as an association. <a href="https://wiki.evolveum.com/display/midPoint/Entitlements#Entitlements-AssociationDefinitionExamples" target="_blank">https://wiki.evol<wbr>veum.com/display/midPoint/Enti<wbr>tlements#Entitlements-Associat<wbr>ionDefinitionExamples</a> . Association can handle both direction of membership (members in group or groups in user). So for example if you assign parrent org to user or other org midpoint also modifies group represented by parrent org. Hope it makes sense. :-)</div><div><br></div><div>Association works with assignments. If properly assigned child orgs should have parrent org in one of assignments and also in parrentOrgRef element.</div><div><br></div><div>Best Regards</div><div>Oskar Butovič</div></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="m_-5666663834610401219m_-8409370931716996937m_-2209458879720677481m_-5335298883541267736m_7824619616342172673h5">2017-10-25 12:23 GMT+02:00 Ian Chen <span dir="ltr"><<a href="mailto:ianchen.op@gmail.com" target="_blank">ianchen.op@gmail.com</a>></span>:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="m_-5666663834610401219m_-8409370931716996937m_-2209458879720677481m_-5335298883541267736m_7824619616342172673h5"><div dir="ltr">Hi List,<div><br></div><div>I'm new here are trying to solve mapping Org to AD groups as <a href="https://evolveum.com/blog/practical-organization-structure-in-active-directory/" target="_blank">https://evolveum.com/blog/prac<wbr>tical-organization-structure-i<wbr>n-active-directory/</a>. I'm stuck at setting member for group.</div><div><br></div><div>It seems AD group can only have member (children), while in midpoint Org is assigned upwards (parent). As I cannot find children Org in outbound mapping, I added an extension attribute to hold parentID of parent Org. My plan is when outbound mapping, searching for any Org with parentID set to current Org ID, but I cannot find how. Please help!</div><div><br></div><div>Also if there is better/simpler method to do this, please let me know.</div><div><br></div><div>Thanks!</div><span class="m_-5666663834610401219m_-8409370931716996937m_-2209458879720677481m_-5335298883541267736m_7824619616342172673m_-4222946517098995713HOEnZb"><font color="#888888"><div>Ian</div>
</font></span></div>
<br></div></div>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="m_-5666663834610401219m_-8409370931716996937m_-2209458879720677481m_-5335298883541267736m_7824619616342172673m_-4222946517098995713gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><table style="font-family:Verdana,Arial,Helvetica,sans-serif;border-collapse:collapse;padding:0px;margin:0px;border-width:0px!important;border-style:solid!important;width:482px!important"><tbody><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;width:160px;vertical-align:bottom;padding:0px;border:0px solid gray!important"><p><span style="font-size:14px;font-weight:bold">Oskar Butovič</span><br>solution architect<br><br>gsm: <a href="tel:+420%20774%20480%20101" value="+420774480101" target="_blank">[+420] 774 480 101</a><br>e-mail: <a href="mailto:oskar.butovic@ami.cz" target="_blank">oskar.butovic@ami.cz</a></p></td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important"> </td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px solid gray!important"> </td><td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;vertical-align:bottom;padding:0px;width:123px;border:0px solid gray!important"><p>AMI Praha a.s.<br>Pláničkova 11<br>162 00 Praha 6<br>tel.: <a href="tel:+420%20274%20783%20239" value="+420274783239" target="_blank">[+420] 274 783 239</a><br>web: <a href="http://www.ami.cz/" target="_blank">www.ami.cz</a></p></td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important"> </td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px solid gray!important"> </td><td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;margin:8px;border:0px solid gray!important;width:116px"><p><img src="http://www.ami.cz/images/podpis/ami_logo.gif" alt="AMI Praha a.s." style="border:0px"></p></td></tr><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td colspan="7" style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;width:480px;border:0px solid gray!important"><br><a href="http://www.ami.cz/reseni-a-sluzby/bezpecnost-dat/identity-management" target="_blank"><img src="http://www.ami.cz/images/podpis/AMI-podpis-IdM_1.png" alt="AMI Praha a.s." style="border:0px;width:480px!important;height:82px!important"></a></td></tr><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td colspan="7" style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:11px;padding:0px;border:0px solid gray!important"><br>Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za společnost AMI Praha a.s.<br>jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně písemnou formu.<br><br></td></tr></tbody></table></div></div></div></div></div></div></div>
</div>
<br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/" target="_blank">http://lists.evolveum.com/</a>mail<wbr>man/listinfo/midpoint<br>
<br></blockquote></div><br></div>
</div></div><br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="m_-5666663834610401219m_-8409370931716996937m_-2209458879720677481m_-5335298883541267736gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><table style="font-family:Verdana,Arial,Helvetica,sans-serif;border-collapse:collapse;padding:0px;margin:0px;border-width:0px!important;border-style:solid!important;width:482px!important"><tbody><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;width:160px;vertical-align:bottom;padding:0px;border:0px solid gray!important"><p><span style="font-size:14px;font-weight:bold">Oskar Butovič</span><br>solution architect<br><br>gsm: [+420] 774 480 101<br>e-mail: <a href="mailto:oskar.butovic@ami.cz" target="_blank">oskar.butovic@ami.cz</a></p></td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important"> </td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px solid gray!important"> </td><td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;vertical-align:bottom;padding:0px;width:123px;border:0px solid gray!important"><p>AMI Praha a.s.<br>Pláničkova 11<br>162 00 Praha 6<br>tel.: [+420] 274 783 239<br>web: <a href="http://www.ami.cz/" target="_blank">www.ami.cz</a></p></td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important"> </td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px solid gray!important"> </td><td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;margin:8px;border:0px solid gray!important;width:116px"><p><img src="http://www.ami.cz/images/podpis/ami_logo.gif" alt="AMI Praha a.s." style="border:0px"></p></td></tr><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td colspan="7" style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;width:480px;border:0px solid gray!important"><br><a href="http://www.ami.cz/reseni-a-sluzby/bezpecnost-dat/identity-management" target="_blank"><img src="http://www.ami.cz/images/podpis/AMI-podpis-IdM_1.png" alt="AMI Praha a.s." style="border:0px;width:480px!important;height:82px!important"></a></td></tr><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td colspan="7" style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:11px;padding:0px;border:0px solid gray!important"><br>Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za společnost AMI Praha a.s.<br>jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně písemnou formu.<br><br></td></tr></tbody></table></div></div></div></div></div></div></div>
</div>
</div></div><br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br></blockquote></div><br></div>
</div></div><br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="m_-5666663834610401219m_-8409370931716996937gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><table style="font-family:Verdana,Arial,Helvetica,sans-serif;border-collapse:collapse;padding:0px;margin:0px;border-width:0px!important;border-style:solid!important;width:482px!important"><tbody><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;width:160px;vertical-align:bottom;padding:0px;border:0px solid gray!important"><p><span style="font-size:14px;font-weight:bold">Oskar Butovič</span><br>solution architect<br><br>gsm: [+420] 774 480 101<br>e-mail: <a href="mailto:oskar.butovic@ami.cz" target="_blank">oskar.butovic@ami.cz</a></p></td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important"> </td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px solid gray!important"> </td><td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;vertical-align:bottom;padding:0px;width:123px;border:0px solid gray!important"><p>AMI Praha a.s.<br>Pláničkova 11<br>162 00 Praha 6<br>tel.: [+420] 274 783 239<br>web: <a href="http://www.ami.cz/" target="_blank">www.ami.cz</a></p></td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important"> </td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px solid gray!important"> </td><td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;margin:8px;border:0px solid gray!important;width:116px"><p><img src="http://www.ami.cz/images/podpis/ami_logo.gif" alt="AMI Praha a.s." style="border:0px"></p></td></tr><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td colspan="7" style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;width:480px;border:0px solid gray!important"><br><a href="http://www.ami.cz/reseni-a-sluzby/bezpecnost-dat/identity-management" target="_blank"><img src="http://www.ami.cz/images/podpis/AMI-podpis-IdM_1.png" alt="AMI Praha a.s." style="border:0px;width:480px!important;height:82px!important"></a></td></tr><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td colspan="7" style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:11px;padding:0px;border:0px solid gray!important"><br>Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za společnost AMI Praha a.s.<br>jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně písemnou formu.<br><br></td></tr></tbody></table></div></div></div></div></div></div></div>
</div>
</div></div><br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br></blockquote></div><br></div>
</div></div></blockquote></div><br></div>