<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="ES-AR" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span lang="ES-MX">Hello,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES-MX"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">My team is having trouble while managing entitlements. We think the issue is from midPoint code, not the connector.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The following images describe how we proceed to add and remove entitlement objects to a role:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">We go to a role (named rol_test in the example) and then we select the induced entitlement tab<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:ES-AR"><img width="1101" height="401" style="width:11.4687in;height:4.177in" id="Picture_x0020_7" src="cid:image007.png@01D64633.17FCACC0"></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Then App A is added with Account,default and ref:group parameters<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:ES-AR"><img width="1079" height="384" style="width:11.2395in;height:4.0in" id="Picture_x0020_8" src="cid:image008.png@01D64633.17FCACC0"></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:ES-AR"><img width="1011" height="334" style="width:10.5312in;height:3.4791in" id="Picture_x0020_9" src="cid:image009.png@01D64633.17FCACC0"></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Add button is clicked and then we proceed to add Entitlement003 and Entitlement001 entitlements. After this, changes are successfully saved.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:ES-AR"><img width="1000" height="374" style="width:10.4166in;height:3.8958in" id="Picture_x0020_11" src="cid:image010.png@01D64633.17FCACC0"></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">We go to rol_test again and delete Entitlement001 saving the change.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:ES-AR"><img width="1097" height="349" style="width:11.427in;height:3.6354in" id="Picture_x0020_12" src="cid:image011.png@01D64633.17FCACC0"></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Then the first error appears. Entitlement001 gets duplicated. Error that always happens. We are currently working on 4.0.1 and the error persists in 3.9 and later versions, except for 4.0.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:ES-AR"><img width="1051" height="392" style="width:10.9479in;height:4.0833in" id="Picture_x0020_13" src="cid:image012.png@01D64633.17FCACC0"></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The second error comes when adding an entitlement with the same name, for example Entitlement003. We add it, the screen is the same as above, so it seems that there are no changes,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">But Entitlement001 is now duplicated again. Error that persists on 3.9 and later versions.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:ES-AR"><img width="1057" height="440" style="width:11.0104in;height:4.5833in" id="Picture_x0020_14" src="cid:image013.png@01D64633.17FCACC0"></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">So, here we have two errors. Duplicated entitlement when trying to remove it and same name entitlement addition allowed, duplicating another one (sometimes the same). My question is…<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Do we proceed incorrectly or midpoint code is failing? Is there an existing code to fix this? I hope that you can help us, thank you for your time.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:9.0pt;color:black;mso-fareast-language:ES-AR">--<o:p></o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:9.0pt;color:black;mso-fareast-language:ES-AR">Matias Ostrovsky</span></b><b><span lang="EN-US" style="font-size:9.0pt;color:black"><o:p></o:p></span></b></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:9.0pt;color:black;mso-fareast-language:ES-AR">Consultant | Cyber Risk Services | Risk Advisory<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:9.0pt;color:black;mso-fareast-language:ES-AR">Deloitte & Co. S.A.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:9.0pt;color:black;mso-fareast-language:ES-AR">Av. Caseros 3563, 5° piso,
</span><span lang="EN-US" style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:black;mso-fareast-language:ES-AR">C126</span><span style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:black;mso-fareast-language:ES-AR">3AAE</span><span style="font-size:9.0pt;color:black;mso-fareast-language:ES-AR">,
Buenos Aires, Argentina<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:black;mso-fareast-language:ES-AR">Tel.:</span><span lang="EN-US" style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D;mso-fareast-language:ES-AR">
</span><span lang="EN-US" style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#7B7B7B;mso-fareast-language:ES-AR">+54 (11) 4390 2600</span><span lang="EN-US" style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D;mso-fareast-language:ES-AR">
Int: </span><span lang="EN-US" style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:gray;mso-fareast-language:ES-AR">2854</span><span lang="EN-US" style="font-size:9.0pt;mso-fareast-language:ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#70AD47;mso-fareast-language:ES-AR"><a href="mailto:mostrovsky@deloitte.com"><span lang="EN-US" style="color:#0563C1">mostrovsky@deloitte.com</span></a></span><span lang="EN-US" style="font-size:9.0pt;mso-fareast-language:ES-AR">
| </span><span style="font-size:9.0pt;mso-fareast-language:ES-AR"><a href="http://www.deloitte.com/ar"><span lang="EN-US" style="color:#75787B">http://www.deloitte.com/ar</span></a></span><span lang="EN-US" style="font-size:9.0pt;color:#70AD47;mso-fareast-language:ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;mso-fareast-language:ES-AR">--<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;mso-fareast-language:ES-AR"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;mso-fareast-language:ES-AR"><img border="0" width="68" height="13" style="width:.7083in;height:.1354in" id="Picture_x0020_6" src="cid:image001.png@01D6462F.E3B4EA20" alt="cid:image001.png@01D59324.E9012610"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;mso-fareast-language:ES-AR"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="ES-MX"><a href="https://www.facebook.com/YourFutureatDeloitteArgentina/"><span lang="ES-AR" style="font-size:9.0pt;color:windowtext;mso-fareast-language:ES-AR;text-decoration:none"><img border="0" width="21" height="21" style="width:.2187in;height:.2187in" id="Picture_x0020_5" src="cid:image002.png@01D6462F.E3B4EA20" alt="cid:image002.png@01D59324.E9012610"></span></a><a href="https://www.linkedin.com/company/deloitte-argentina"><span lang="ES-AR" style="font-size:9.0pt;color:windowtext;mso-fareast-language:ES-AR;text-decoration:none"><img border="0" width="21" height="21" style="width:.2187in;height:.2187in" id="Picture_x0020_4" src="cid:image003.png@01D6462F.E3B4EA20" alt="cid:image003.png@01D59324.E9012610"></span></a></span><span style="font-size:9.0pt;mso-fareast-language:ES-AR"> </span><span lang="ES-MX"><a href="https://twitter.com/deloittearg"><span lang="ES-AR" style="font-size:9.0pt;color:windowtext;mso-fareast-language:ES-AR;text-decoration:none"><img border="0" width="20" height="21" style="width:.2083in;height:.2187in" id="Picture_x0020_3" src="cid:image004.png@01D6462F.E3B4EA20" alt="cid:image004.png@01D59324.E9012610"></span></a></span><span style="font-size:9.0pt;mso-fareast-language:ES-AR"> </span><span lang="ES-MX"><a href="https://www.youtube.com/user/DeloitteArgentina"><span lang="ES-AR" style="font-size:9.0pt;color:windowtext;mso-fareast-language:ES-AR;text-decoration:none"><img border="0" width="20" height="21" style="width:.2083in;height:.2187in" id="Picture_x0020_2" src="cid:image005.png@01D6462F.E3B4EA20" alt="cid:image005.png@01D59324.E9012610"></span></a></span><span style="font-size:9.0pt;mso-fareast-language:ES-AR"> </span><span lang="ES-MX"><a href="https://www.instagram.com/deloitte_ar/"><span lang="ES-AR" style="font-size:9.0pt;color:windowtext;mso-fareast-language:ES-AR;text-decoration:none"><img border="0" width="20" height="21" style="width:.2083in;height:.2187in" id="Picture_x0020_1" src="cid:image006.png@01D6462F.E3B4EA20" alt="cid:image006.png@01D59324.E9012610"></span></a></span><span style="font-size:9.0pt;mso-fareast-language:ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;mso-fareast-language:ES-AR">--<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#70AD47;mso-fareast-language:ES-AR">Antes de imprimir, piensa en tu responsabilidad con el medio ambiente.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES-MX"><o:p> </o:p></span></p>
</div>
<p>Deloitte refers to a Deloitte member firm, one of its related entities, or Deloitte Touche Tohmatsu Limited (“DTTL”). Each Deloitte member firm is a separate legal entity and a member of DTTL. DTTL does not provide services to clients. Please see
<a href="www.deloitte.com/about">www.deloitte.com/about</a> to learn more.<br>
</p>
</body>
</html>