<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hello list,<div class=""><br class=""></div><div class="">I’m attempting to use createOnDemand with associationTargetSearch with Active Directory groups, is this possible?</div><div class="">I have not seen any example or documentation on this.</div><div class=""><br class=""></div><div class="">The associationTargetSearch works if the group exists, but I cannot seem to create a group with createOnDemand.</div><div class="">I’ve created roles with createOnDemand with no problem, but since this is a resource object, is this supported? According to the schema, it should.</div><div class=""><br class=""></div><div class="">I’m getting this error, there is a single populateItem trying to write do the DN attribute:</div><div class=""><br class=""></div><div class=""><b class="">Error evaluating mapping for association {.../resource/instance-3}group
in construction for
(resource:xxxx(AD)/ACCOUNT/default/null)
in role:xxx(Metarole): No target item that would conform to the path
attributes/dn in expression in mapping in outbound mapping for
association</b></div><div class=""><b class=""><br class=""></b></div><div class="">I have tried “dn”, “ri:dn”, “attributes/ri:dn” on the <path> element, none of them worked.</div><div class=""><br class=""></div><div class="">My code:</div><div class=""><associationTargetSearch><br class=""> <filter><br class=""> <q:equal><br class=""> <q:path>attributes/ri:dn</q:path><br class=""> <expression><br class=""> <script><br class=""> <code><br class=""> // my logic here<br class=""> </code><br class=""> </script><br class=""> </expression><br class=""> </q:equal><br class=""> </filter><br class=""> <searchStrategy>onResourceIfNeeded</searchStrategy><br class=""> <createOnDemand>true</createOnDemand><br class=""> <populateObject><br class=""> <populateItem><br class=""> <expression><br class=""> <script><br class=""> <code><br class=""> // my logic here<br class=""> </code><br class=""> </script><br class=""> </expression><br class=""> <target><br class=""> <path>attributes/dn</path><br class=""> </target><br class=""> </populateItem><br class=""> </populateObject><br class=""></associationTargetSearch></div><div class=""><br class=""></div><div class=""><br class=""></div></body></html>