<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hello Om,</p>
<p>I apologize for my late answer, I was very busy with our
development project this month. From what I see, you don't need to
specify tag in the projectionDiscriminator (that looks for group
shadows), simply because you don't have tags for groups!</p>
<p>So, I think that <br>
<br>
<projectionDiscriminator><br>
<kind>entitlement</kind><br>
<intent>entitlement</intent><br>
</projectionDiscriminator></p>
<p>should work just fine - it should select appropriate entitlement
for given account.</p>
<p>What you perhaps need, though, is to somehow enable the
inducement "ent-1" only for accounts with tag "abc", and
inducement "ent-2" only for accounts with tag "gpo".</p>
<p>I would consider adding a condition to particular outbound
mappings. (I am not sure if it would work, but you can try. The
idea is to check the tag of the account in question.)</p>
<p>Best regards,<br>
</p>
<pre class="moz-signature" cols="72">--
Pavol Mederly
Software developer
evolveum.com</pre>
<div class="moz-cite-prefix">On 03/06/2025 16:00, Om Bhallamudi via
midPoint wrote:<br>
</div>
<blockquote type="cite"
cite="mid:X7VQ5PDxJ7ULyka-PbcJtLvQxAtNRuEAtjTowFggU-YN4m4aesmty7q07NDuF-Vg92EFb5Sp8Te771O6j9F05f3Znw8fOvX-sbfYJ7q1Hs0=@proton.ch">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div style="font-family: Arial, sans-serif; font-size: 14px;">Hi
Pavol,</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><span
style="display: inline !important; background-color: rgb(255, 255, 255);">On
Tuesday, 3 June 2025 at 13:58, Pavol Mederly via midPoint
<a class="moz-txt-link-rfc2396E" href="mailto:midpoint@lists.evolveum.com"><midpoint@lists.evolveum.com></a> wrote:</span>
<blockquote type="cite"
style="padding-block: 0px; padding-inline: 1rem 0px; margin: 0px; border-inline-start: 4px solid rgb(229, 229, 229); scrollbar-width: thin; background-color: rgb(255, 255, 255);">
<p style="scrollbar-width:thin">I am quite surprised you have
different tags for groups. Usually, they are used for
accounts. What is your use case?</p>
</blockquote>
<span
style="display: inline !important; background-color: rgb(255, 255, 255);">Thanks
for clearing that up. I am using tags for the accounts, but
want to assign different entitlements to the accounts:</span></div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;">
<ol
data-editing-info="{"orderedStyleType":1,"unorderedStyleType":1}"
style="margin-top: 0px; margin-bottom: 0px;">
<li style="list-style-type: "1. ";"><span>Accounts:
account-1 (tag: abc), account-2 (tag: gpo)</span></li>
<li style="list-style-type: "2. ";"><span>Roles:</span></li>
<ol
style="margin-top: 0px; margin-bottom: 0px; list-style-type: lower-alpha;">
<li style=""><span>abc-account:</span></li>
<ol
style="margin-top: 0px; margin-bottom: 0px; list-style-type: lower-roman;">
<li style=""><span>Construct account with tag
"abc-account"</span></li>
</ol>
<li style=""><span>gpo-account</span></li>
<ol
style="margin-top: 0px; margin-bottom: 0px; list-style-type: lower-roman;">
<li style=""><span>Construct account with tag
"gpo-account"</span></li>
</ol>
<li style=""><span>ent-1:</span></li>
<ol
style="margin-top: 0px; margin-bottom: 0px; list-style-type: lower-roman;">
<li style=""><span>Construct entitlement ent-1 on resource</span></li>
<li style=""><span>Inducement: Associate account with tag:
abc with ent-1</span></li>
</ol>
<li style=""><span>ent-2:</span></li>
<ol
style="margin-top: 0px; margin-bottom: 0px; list-style-type: lower-roman;">
<li style="scrollbar-width:thin"><span
style="scrollbar-width:thin">Construct entitlement
ent-2 on resource</span></li>
<li style="scrollbar-width:thin"><span
style="display: inline !important; background-color: rgb(255, 255, 255);">Inducement: </span>Associate
account with tag: gpo with ent-2</li>
</ol>
</ol>
<li
style="scrollbar-width: thin; list-style-type: "3. ";">Expected
output </li>
<ol
style="margin-top: 0px; margin-bottom: 0px; list-style-type: lower-alpha;">
<li style="scrollbar-width: thin;">Accounts:</li>
<ol
style="margin-top: 0px; margin-bottom: 0px; list-style-type: lower-roman;">
<li style="scrollbar-width: thin;">account-1, attributes:
entitlements = [ "ent-1"]</li>
<li style="scrollbar-width: thin;">account-2, attributes:
entitlements = [ "ent-2"]<br>
</li>
</ol>
<li style="scrollbar-width: thin;">Entitlements:</li>
<ol
style="margin-top: 0px; margin-bottom: 0px; list-style-type: lower-roman;">
<li style="scrollbar-width: thin;">ent-1</li>
<li style="scrollbar-width: thin;">ent-2</li>
</ol>
</ol>
</ol>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;">FYI
I am using tags for (abc, gpo) and not intents because I'd like
the values to be dynamic..</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div class="protonmail_signature_block"
style="font-family: Arial, sans-serif; font-size: 14px;">
<div class="protonmail_signature_block-user"> Om Bhallamudi<br>
Proton AG</div>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;">
<div class="protonmail_quote"> </div>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre wrap="" class="moz-quote-pre">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="https://lists.evolveum.com/mailman/listinfo/midpoint">https://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
</body>
</html>