<div dir="ltr">Hey Sebastian,<div> you need to set
mapping strength from "normal" to "strong". This ensures it's always re-evaluated. <br><br><p class="MsoNormal"><span lang="EN-GB">Best Regards<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-GB">Lubo</span></p></div></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">po 14. 7. 2025 o 21:35 Sebastian Beetz via midPoint <<a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a>> napísal(a):<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg-9221989458056411811">
<div lang="DE" style="overflow-wrap: break-word;">
<div class="m_-9221989458056411811WordSection1">
<p class="MsoNormal">Hello! <u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span lang="EN-GB">I am currently trying to introduce a condition to automatic role assignments according to
<a href="https://docs.evolveum.com/midpoint/reference/support-4.8/roles-policies/automatic-role-assignment/" target="_blank">
https://docs.evolveum.com/midpoint/reference/support-4.8/roles-policies/automatic-role-assignment/</a> .<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">Now I want to update existing user assignments according to the condition. Problem is that the condition is not evaluated, neither through recompute nor reconcile.
<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">When the user object is updated, e.g. by changing the description attribute, the assignment condition is correctly evaluated.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">Am I missing something here? Am I doing something wrong?<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">The mapping in the user template looks like this:
<br>
<br>
<u></u><u></u></span></p>
<p class="MsoNormal" style="text-indent:35.4pt"><span lang="EN-GB"><mapping id="3"><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> <name>Role Assignment</name><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> <strength>normal</strength><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> <source><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> <path>description</path><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> </source><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> <expression><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> <value xmlns=<a href="http://midpoint.evolveum.com/xml/ns/public/common/common-3" target="_blank">http://midpoint.evolveum.com/xml/ns/public/common/common-3</a>><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> <targetRef xmlns=""><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> <oid>cc65382f-28a3-40a4-84e8-822d312d61cd</oid><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> <type>c:RoleType</type><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> </targetRef><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> </value><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> </expression><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> <target><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> <path>assignment</path><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> </target><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> <condition><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> <script><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> <code>description?.split(":")[1] != 'EXPIRED'</code><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> </script><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> </condition><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:35.4pt"><span lang="EN-GB"> </mapping><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">I already tried different strength settings as well as omitting it completely.
<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">As always, every help is appreciated. <u></u>
<u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">Best Regards<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB">Sebastian <u></u><u></u></span></p>
</div>
<br>
<br>
<br>
<div style="font-size:10pt;font-family:Verdana,sans-serif"><b>Sebastian Beetz</b> | Solution Consultant, Team Lead Internal Infrastructure<br>
Mobil: +49 151 67806842 | Tel: +49 6151 7869-142 <br>
<br>
<b>KOGIT GmbH</b> | Rheinstr. 40-42 | 64283 Darmstadt<br>
<a href="https://www.kogit.de" target="_blank">www.kogit.de</a> | <a href="https://de.linkedin.com/company/kogit-gmbh" target="_blank">
LinkedIn</a> | <a href="https://www.xing.com/pages/kogitgmbh" target="_blank">Xing</a> | <a href="https://www.instagram.com/kogit_gmbh/" target="_blank">
Instagram</a> <br>
<br>
Geschäftsführer: Gerald Kaufhold<br>
Amtsgericht Darmstadt | HRB 8640 | Ust-IdNr: DE224251141<br>
Datenschutzhinweise | <a href="https://www.kogit.de/datenschutz" target="_blank">www.kogit.de/datenschutz</a>
<br>
<br>
</div>
</div>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="https://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">https://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</div></blockquote></div>