From 429b8622bf20b7ead2c5abc9745b0fdff4c18212 Mon Sep 17 00:00:00 2001 From: Paul Caskey Date: Sun, 17 Sep 2023 00:18:29 +0000 Subject: [PATCH] update midPoint config doc --- .../container_files/httpd/midPoint-doc.html | 2679 +++++++++-------- 1 file changed, 1478 insertions(+), 1201 deletions(-) diff --git a/Workbench/webproxy/container_files/httpd/midPoint-doc.html b/Workbench/webproxy/container_files/httpd/midPoint-doc.html index 8763f01..ff4faf1 100644 --- a/Workbench/webproxy/container_files/httpd/midPoint-doc.html +++ b/Workbench/webproxy/container_files/httpd/midPoint-doc.html @@ -595,7 +595,7 @@

MidPoint Project Documentation

Evolveum, s.r.o.
version 0.1, -2022-10-04 +2023-09-16
Table of Contents
@@ -606,7 +606,6 @@

MidPoint Project Documentation

@@ -618,12 +617,8 @@

MidPoint Project Documentation

  • 2.1.1. Basic Information
  • 2.1.2. Object Types -
  • -
  • 2.1.3. Synchronization -
  • @@ -636,7 +631,7 @@

    MidPoint Project Documentation

  • Normal User Account
  • -
  • 2.2.3. Synchronization +
  • 2.2.3. Synchronization @@ -648,12 +643,12 @@

    MidPoint Project Documentation

  • 2.3.1. Basic Information
  • 2.3.2. Object Types
  • -
  • 2.3.3. Synchronization +
  • 2.3.3. Synchronization
  • @@ -666,84 +661,101 @@

    MidPoint Project Documentation

  • Normal Account, ACCOUNT
  • -
  • 2.4.3. Synchronization +
  • 2.4.3. Synchronization
  • -
  • 2.5. Target: Computer science portal (CSV) +
  • 2.5. Target: AD
  • -
  • 2.6. Target: Faculty portal (CSV) +
  • 2.6. Target: Computer science portal (CSV)
  • -
  • 2.7. Target: LDAP directory +
  • 2.7. Target: Faculty portal (CSV) +
  • +
  • 2.8. Target: LDAP directory +
  • -
  • 2.8. Target: Mailing lists (CSV) +
  • 2.9. Target: Mailing lists (CSV)
  • -
  • 2.9. Target: Wordpress +
  • 2.10. Target: Wordpress
  • 6. Tasks +
  • +
  • 7. Users +
  • @@ -909,108 +926,6 @@

    1.1.2. Items

    name
    employeeNumber
    -
    -

    1.1.3. Mappings

    - ------ - - - - - - - - - - - - - - - - - - - - - -

    Name

    Options

    Strength: strong

    Authoritative:

    Exclusive:

    Source

    -

    employeeNumber

    -

    Target

    -

    assignment

    -
    -
    Script
    -
    -
    Relativity:
    -Include null inputs:
    -
    -
    -
    -
    Groovy
    -
    -
    import com.evolveum.midpoint.xml.ns._public.common.common_3.*
    -import com.evolveum.midpoint.schema.constants.*
    -import com.evolveum.midpoint.schema.*
    -import javax.xml.namespace.*
    -import com.evolveum.midpoint.util.*
    -import com.evolveum.midpoint.prism.path.*
    -
    -GROUPER_RESOURCE_OID = '1eff65de-5bb6-483d-9edf-8cc2c2ee0233'
    -MEMBER_NAME = new QName(MidPointConstants.NS_RI, 'member')
    -
    -memberDef = prismContext.definitionFactory().createPropertyDefinition(MEMBER_NAME, DOMUtil.XSD_STRING)
    -memberDef.setMaxOccurs(-1)
    -
    -shadowQuery = prismContext.queryFor(ShadowType.class)
    -    .item(ShadowType.F_RESOURCE_REF).ref(GROUPER_RESOURCE_OID)
    -    .and().item(ShadowType.F_SYNCHRONIZATION_SITUATION).eq(SynchronizationSituationType.LINKED)
    -    .and().item(ShadowType.F_KIND).eq(ShadowKindType.ENTITLEMENT)
    -    .and().item(ShadowType.F_INTENT).eq('group')
    -    .and().block().item(ShadowType.F_DEAD).isNull().or().item(ShadowType.F_DEAD).eq(false).endBlock()
    -    .and().item(ItemPath.create(ShadowType.F_ATTRIBUTES, MEMBER_NAME), memberDef).eq(basic.stringify(employeeNumber))
    -    .build()
    -
    -options = SelectorOptions.createCollection(GetOperationOptions.createNoFetch())
    -shadows = midpoint.searchObjects(ShadowType.class, shadowQuery, options)
    -
    -orgNames = shadows.collect { basic.stringify(it.name) }            // todo - use attributes
    -log.info('org names = {}', orgNames)
    -
    -if (!orgNames.isEmpty()) {
    -    orgQueryBuilder = prismContext.queryFor(OrgType.class)
    -
    -    first = true
    -    for (orgName in orgNames) {
    -        if (first) {
    -            first = false
    -        } else {
    -            orgQueryBuilder = orgQueryBuilder.or()
    -        }
    -        orgQueryBuilder = orgQueryBuilder.item(ItemPath.create(OrgType.F_EXTENSION, 'grouperName')).eq(orgName)
    -    }
    -
    -    orgQuery = orgQueryBuilder.build()
    -    //log.info('org query:\n', orgQuery.debugDump())
    -
    -    orgs = midpoint.searchObjects(OrgType.class, orgQuery, null)
    -    log.info('orgs found: {}', orgs)
    -
    -    orgs.collect {
    -        new AssignmentType(prismContext)
    -            .subtype('grouper-group')
    -            .targetRef(it.oid, OrgType.COMPLEX_TYPE)
    -    }
    -} else {
    -    null
    -}
    -
    -
    -
    @@ -1033,8 +948,8 @@

    2. Resources

    Source: Groups

    -

    Groups from Grouper

    -

    1eff65de-5bb6-483d-9edf-8cc2c2ee0233

    + +

    fb0bbf07-e33f-4ddd-85a1-16a7edc237f2

    Source: Guest DB

    @@ -1052,6 +967,11 @@

    2. Resources

    4d70a0da-02dd-41cf-b0a1-00e75d3eaa15

    +

    Target: AD

    + +

    6597e333-3f18-478d-84e7-58521a5eec2b

    + +

    Target: Computer science portal (CSV)

    a343fc2e-3954-4034-ba1a-2b72c21e577a

    @@ -1080,28 +1000,25 @@

    2. Resources

    2.1. Source: Groups

    -
    -

    Groups from Grouper

    -

    2.1.1. Basic Information

    Connector
    -

    Resource uses GrouperConnector connector. Artifact details:

    +

    Resource uses connector. Artifact details:

    @@ -1121,63 +1038,38 @@
    Connector Configuration
    -

    baseUrl

    -

    https://grouper-ws:443

    - - - -

    username

    -

    banderson

    - - - -

    password

    -

    XML

    - - - -

    ignoreSslValidation

    -

    true

    - - - -

    baseStem

    -

    :

    +

    host

    +

    grouper_data

    -

    groupIncludePattern

    -

    app:.*

    +

    port

    +

    5432

    -

    groupIncludePattern

    -

    test:.*

    +

    userName

    +

    grouper

    -

    groupIncludePattern

    -

    ref:.*

    +

    password

    +

    password

    -

    groupExcludePattern

    -

    .*_(includes

    -

    excludes

    - - -

    systemOfRecord

    -

    systemOfRecordAndIncludes)

    +

    databaseName

    +

    grouper_to_midpoint

    -

    subjectSource

    -

    ldap

    +

    attrsToHaveInAllSearch

    +

    members

    -

    testStem

    -

    :

    +

    attrsToHaveInAllSearch

    +

    member_of

    @@ -1201,7 +1093,7 @@
    Results Handlers Confi

    enableFilteredResultsHandler

    -

    true

    +

    false

    enableNormalizingResultsHandler

    @@ -1222,42 +1114,12 @@
    Native
    Options - - -

    schema

    -
    - - -

    testConnection

    -
    - - -

    script

    -
    -
      -
    • -

      host:[com.evolveum.midpoint.xml.ns._public.resource.capabilities_3.ScriptCapabilityHostType@6a49e1a2[language=<null>,type=CONNECTOR]]

      -
    • -
    -
    - - -

    read

    -
    -
      -
    • -

      returnDefaultAttributesOption: false

      -
    • -
    -
    - -

    2.1.2. Object Types

    -
    ENTITLEMENT/group
    +
    Default Account, ACCOUNT/default
    @@ -1273,12 +1135,12 @@
    ENTITLEMENT
    - + - + @@ -1287,10 +1149,10 @@
    ENTITLEMENT
    Attribute Details
    -

    member

    +

    member_of

    -

    name

    +

    subject_id

    Inbounds

    @@ -1309,7 +1171,7 @@
    Attribute
    - + @@ -1318,11 +1180,68 @@
    Attribute

    member

    member_of

    name

    subject_id

    Options

    Strength: strong

    Strength:

    Authoritative:

    Exclusive:

    Target

    -

    extension/grouperName

    +

    $user/name

    +
    + +
    +
    +
    Group, ENTITLEMENT/group
    + +++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    AttributeTypeDescription

    description

    display_name

    group_name

    members

    uid

    +
    +
    Attribute Details
    +
    +

    description

    +
    +
    +

    Inbounds

    +
    @@ -1337,7 +1256,7 @@
    Attribute
    - + @@ -1346,40 +1265,17 @@
    Attribute
    - - -

    Options

    Strength: strong

    Strength:

    Authoritative:

    Exclusive:

    Target

    -

    assignment

    -
    -
    Script
    -
    -
    Relativity:
    -Include null inputs:
    -
    -
    -
    -
    Groovy
    -
    -
    import com.evolveum.midpoint.schema.util.*
    -import com.evolveum.midpoint.schema.constants.*
    -
    -if (input == null) {
    -    null
    -} else {
    -    archetypeOid = '5f2b96d2-49b5-4a8a-9601-14457309a69b'       // generic-grouper-group archetype
    -    switch (input) {
    -        case ~/ref:affiliation:.*/: archetypeOid = '56f53812-047d-4b69-83e8-519a73d161e1'; break;   // affiliation archetype
    -        case ~/ref:dept:.*/: archetypeOid = '1cec5f78-8fba-459b-9547-ef7485009f40'; break;          // department archetype
    -        case ~/ref:course:.*/: archetypeOid = '3dab9a72-118b-4e40-a138-bb691c335eca'; break;        // course archetype
    -        case ~/app:mailinglist:.*/: archetypeOid = '1645d1dc-1f7c-4508-b50b-97b501ccdee3'; break;   // mailing-list archetype
    -    }
    -    ObjectTypeUtil.createAssignmentTo(archetypeOid, ObjectTypes.ARCHETYPE, prismContext)
    -}
    -
    +

    $focus/description

    +
    +

    display_name

    +
    +
    +

    Inbounds

    +
    @@ -1394,7 +1290,7 @@
    Attribute
    - + @@ -1403,25 +1299,69 @@
    Attribute
    + +

    Options

    Strength: strong

    Strength:

    Authoritative:

    Exclusive:

    Target

    -

    assignment

    +

    extension/grouperDisplayName

    + ++++++ + - + + + + + + + + + + + + + + + +
    -
    AssignmentTargetSearch
    -
    -
    Relativity:
    -Include null inputs:
    -
    +

    Name

    Options

    Strength:

    Authoritative:

    Exclusive:

    Source

    Target

    +

    $focus/displayName

    +
    +
    +

    group_name

    -
    -
    XML
    -
    -
    <t:object xmlns:t="http://prism.evolveum.com/xml/ns/public/types-3" xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3" xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3" xmlns:icfs="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3" xmlns:org="http://midpoint.evolveum.com/xml/ns/public/common/org-3" xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3" xmlns:ri="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="c:AssignmentTargetSearchExpressionEvaluatorType">
    -    <targetType>RoleType</targetType>
    -    <oid>30082d24-0bea-4f22-b558-d0ee2a399c38</oid>
    -</t:object>
    +
    +

    Inbounds

    + ++++++ + + + + + + + + + + + + + + + + @@ -1454,35 +1394,80 @@
    Attribute

    Name

    Options

    Strength: strong

    Authoritative:

    Exclusive:

    Source

    Target

    +

    extension/grouperName

    -
    AssignmentTargetSearch
    +
    Script
    Relativity:
     Include null inputs:
    -
    XML
    +
    Groovy
    -
    <t:object xmlns:t="http://prism.evolveum.com/xml/ns/public/types-3" xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3" xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3" xmlns:icfs="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3" xmlns:org="http://midpoint.evolveum.com/xml/ns/public/common/org-3" xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3" xmlns:ri="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="c:AssignmentTargetSearchExpressionEvaluatorType">
    -    <targetType>RoleType</targetType>
    -    <oid>9e5a82fc-7969-4fd8-9f74-e0857969cdbb</oid>
    -</t:object>
    +
    import com.evolveum.midpoint.schema.util.*
    +import com.evolveum.midpoint.schema.constants.*
    +
    +if (input == null) {
    +    null
    +} else {
    +    archetypeOid = '5f2b96d2-49b5-4a8a-9601-14457309a69b'       // generic-grouper-group archetype
    +    switch (input) {
    +        case ~/ref:affiliation:.*/: archetypeOid = '56f53812-047d-4b69-83e8-519a73d161e1'; break;   // affiliation archetype
    +        case ~/ref:dept:.*/: archetypeOid = '1cec5f78-8fba-459b-9547-ef7485009f40'; break;          // department archetype
    +        case ~/ref:course:.*/: archetypeOid = '3dab9a72-118b-4e40-a138-bb691c335eca'; break;        // course archetype
    +        case ~/app:mailinglist:.*/: archetypeOid = '1645d1dc-1f7c-4508-b50b-97b501ccdee3'; break;   // mailing-list archetype
    +    }
    +    ObjectTypeUtil.createAssignmentTo(archetypeOid, ObjectTypes.ARCHETYPE, prismContext)
    +}
    +
    +

    members

    +
    +

    uid

    +
    +

    Inbounds

    -
    -

    2.1.3. Synchronization

    -
    -
    ENTITLEMENT/group
    + ++++++ + + + + + + + + + + + + + + + + + + +

    Name

    Options

    Strength:

    Authoritative:

    Exclusive:

    Source

    Target

    +

    $focus/name

    +
    +
    +
    +

    2.2. Source: Guest DB

    @@ -1492,21 +1477,21 @@

    2.2. Source:

    2.2.1. Basic Information

    Connector
    -

    Resource uses DatabaseTableConnector connector. Artifact details:

    +

    Resource uses connector. Artifact details:

    @@ -1610,58 +1595,6 @@
    Native
    Options - - -

    schema

    -
    - - -

    liveSync

    -
    - - -

    testConnection

    -
    - - -

    create

    -
    - - -

    update

    -
    -
      -
    • -

      addRemoveAttributeValues: true

      -
    • -
    -
    - - -

    delete

    -
    - - -

    script

    -
    -
      -
    • -

      host:[com.evolveum.midpoint.xml.ns._public.resource.capabilities_3.ScriptCapabilityHostType@54bfb612[language=<null>,type=CONNECTOR]]

      -
    • -
    -
    - - -

    read

    -
    -
      -
    • -

      returnDefaultAttributesOption: false

      -
    • -
    -
    - -
    -

    2.2.3. Synchronization

    +

    2.2.3. Synchronization

    ACCOUNT
    @@ -2118,21 +2101,21 @@

    2.3. Source

    2.3.1. Basic Information

    Connector
    -

    Resource uses CsvConnector connector. Artifact details:

    +

    Resource uses connector. Artifact details:

    @@ -2152,44 +2135,44 @@
    Connector Configuration
    -

    fieldDelimiter

    -

    ,

    +

    filePath

    +

    /opt/midpoint/csv/source-hr.csv

    -

    quote

    -

    "

    +

    encoding

    +

    utf-8

    -

    filePath

    -

    /opt/midpoint/csv/source-hr.csv

    +

    quote

    +

    "

    -

    readOnly

    -

    true

    +

    fieldDelimiter

    +

    ,

    -

    encoding

    -

    utf-8

    +

    uniqueAttribute

    +

    uid

    -

    ignoreSurroundingSpaces

    +

    readOnly

    true

    -

    uniqueAttribute

    -

    uid

    +

    ignoreSurroundingSpaces

    +

    true

    Capabilities
    -
    Native
    +
    Configured
    @@ -2201,144 +2184,30 @@
    Native
    - +
    Options
    +
    +
    +

    2.3.2. Object Types

    +
    +
    Default Account, ACCOUNT/default
    + +++++ + - - + + + + + - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

    schema

    AttributeTypeDescription

    liveSync

    testConnection

    create

    update

    -
      -
    • -

      addRemoveAttributeValues: true

      -
    • -
    -

    delete

    script

    -
      -
    • -

      host:[com.evolveum.midpoint.xml.ns._public.resource.capabilities_3.ScriptCapabilityHostType@19ba87d8[language=<null>,type=RESOURCE], com.evolveum.midpoint.xml.ns._public.resource.capabilities_3.ScriptCapabilityHostType@b46b8a6[language=<null>,type=CONNECTOR]]

      -
    • -
    -

    read

    -
      -
    • -

      returnDefaultAttributesOption: false

      -
    • -
    -
    -
    Configured
    - ---- - - - - - - - - - - - - - - - - - - - - - - - - -
    CapabilityOptions

    delete

    -
      -
    • -

      enabled: false

      -
    • -
    -

    update

    -
      -
    • -

      enabled: false

      -
    • -
    -

    create

    -
      -
    • -

      enabled: false

      -
    • -
    -

    countObjects

    -
      -
    • -

      simulate:

      -
      -
        -
      • -

        value: sequentialSearch

        -
      • -
      -
      -
    • -
    -
    -
    - @@ -2754,21 +2673,21 @@

    2.4. Source: SIS

    2.4.1. Basic Information

    Connector
    -

    Resource uses ScriptedSQLConnector connector. Artifact details:

    +

    Resource uses connector. Artifact details:

    @@ -2788,11 +2707,6 @@
    Connector Configuration
    -

    quoting

    -

    XML

    - - -

    host

    sources

    @@ -2803,6 +2717,11 @@
    Connector Configuration
    +

    quoting

    +

    XML

    + + +

    user

    root

    @@ -2818,191 +2737,125 @@
    Connector Configuration
    -

    jdbcDriver

    -

    org.mariadb.jdbc.Driver

    +

    scriptingLanguage

    +

    GROOVY

    -

    jdbcUrlTemplate

    -

    jdbc:mysql://%h:%p/%d?useUnicode=true&characterEncoding=utf8&connectionCollation=utf8_bin

    +

    searchScriptFileName

    +

    /opt/midpoint/var/res/sis-persons/SearchScript.groovy

    -

    enableEmptyString

    -

    true

    +

    testScriptFileName

    +

    /opt/midpoint/var/res/sis-persons/TestScript.groovy

    -

    rethrowAllSQLExceptions

    -

    true

    +

    schemaScriptFileName

    +

    /opt/midpoint/var/res/sis-persons/SchemaScript.groovy

    -

    nativeTimestamps

    +

    reloadScriptOnExecution

    false

    -

    allNative

    -

    false

    +

    validConnectionQuery

    +

    XML

    -

    validConnectionQuery

    +

    jndiProperties

    XML

    -

    datasource

    -

    XML

    +

    jdbcDriver

    +

    org.mariadb.jdbc.Driver

    -

    scriptingLanguage

    -

    GROOVY

    +

    jdbcUrlTemplate

    +

    jdbc:mysql://%h:%p/%d?useUnicode=true&characterEncoding=utf8&connectionCollation=utf8_bin

    -

    jndiProperties

    -

    XML

    +

    enableEmptyString

    +

    true

    -

    reloadScriptOnExecution

    -

    false

    +

    rethrowAllSQLExceptions

    +

    true

    -

    searchScriptFileName

    -

    /opt/midpoint/var/res/sis-persons/SearchScript.groovy

    +

    nativeTimestamps

    +

    false

    -

    schemaScriptFileName

    -

    /opt/midpoint/var/res/sis-persons/SchemaScript.groovy

    +

    allNative

    +

    false

    -

    testScriptFileName

    -

    /opt/midpoint/var/res/sis-persons/TestScript.groovy

    +

    datasource

    +

    XML

    -
    Capabilities
    -
    Native
    +
    +
    +

    2.4.2. Object Types

    +
    +
    Normal Account, ACCOUNT
    --+++ - - + + + - - + + + - - + + + - - + + + - - + + + - - - - - - - - - - - - - - - - -
    CapabilityOptionsAttributeTypeDescription

    schema

    fullName (Full Name)

    liveSync

    givenName (Given Name)

    testConnection

    mail (Mail)

    create

    surname (Surname)

    update

    -
      -
    • -

      addRemoveAttributeValues: true

      -
    • -
    -

    delete

    script

    -
      -
    • -

      host:[com.evolveum.midpoint.xml.ns._public.resource.capabilities_3.ScriptCapabilityHostType@3f0a0aee[language=<null>,type=CONNECTOR]]

      -
    • -
    -

    read

    -
      -
    • -

      returnDefaultAttributesOption: false

      -
    • -
    -
    -
    -
    -

    2.4.2. Object Types

    -
    -
    Normal Account, ACCOUNT
    - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + + +
    AttributeTypeDescription

    fullName (Full Name)

    givenName (Given Name)

    mail (Mail)

    surname (Surname)

    uid (UID)

    uid (UID)

    + + + + ++++++ + + + + + + + + + + + + + + + + + + + - - - - - - - - - - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

    Name

    Options

    Strength: strong

    Authoritative:

    Exclusive:

    Source

    Target

    +

    assignment

    +
    +
    AssignmentTargetSearch
    +
    +
    Relativity:
    +Include null inputs:
    +
    +
    +
    +
    XML
    +
    <t:object xmlns:t="http://prism.evolveum.com/xml/ns/public/types-3" xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3" xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3" xmlns:icfs="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3" xmlns:org="http://midpoint.evolveum.com/xml/ns/public/common/org-3" xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3" xmlns:ri="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="c:AssignmentTargetSearchExpressionEvaluatorType">
         <targetType>ArchetypeType</targetType>
         <oid>958da09c-fefb-11e9-892d-975972472527</oid>
    @@ -3275,7 +3177,7 @@ 
    Attri
    -

    2.5. Target: Computer science portal (CSV)

    +

    2.5. Target: AD

    2.5.1. Basic Information

    Connector
    -

    Resource uses CsvConnector connector. Artifact details:

    +

    Resource uses connector. Artifact details:

    @@ -3322,16 +3224,777 @@
    Connector Configuration

    multivalueDelimiter

    ;

    fieldDelimiter

    ,

    host

    dc1.ad.example.edu

    port

    636

    connectionSecurity

    ssl

    authenticationType

    simple

    bindDn

    CN=Administrator,CN=Users,DC=ad,DC=example,DC=edu

    bindPassword

    XML

    baseContext

    DC=ad,DC=example,DC=edu

    readSchema

    true

    allowUntrustedSsl

    true

    +
    Results Handlers Configuration
    + ++++ + + + + + + + + + + + + + + + + + + + + +
    ParameterValue

    enableAttributesToGetSearchResultsHandler

    false

    enableFilteredResultsHandler

    false

    enableNormalizingResultsHandler

    false

    +
    +
    +

    2.5.2. Object Types

    +
    +
    Default Account, ACCOUNT
    + +++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    AttributeTypeDescription

    cn

    createTimeStamp

    dn (Distinguished Name)

    givenName

    instanceType

    nTSecurityDescriptor

    objectCategory

    pwdLastSet

    sAMAccountName (Login name)

    sn

    userPrincipalName

    +
    +
    Attribute Details
    +
    +

    cn

    +
    +
    +

    Outbound

    +
    + ++++++ + + + + + + + + + + + + + + + + + + +

    Name

    Options

    Strength:

    Authoritative:

    Exclusive:

    Source

    +

    $user/name

    +

    Target

    +
    +

    createTimeStamp

    +
    +
    +

    dn (Distinguished Name)

    +
    +
    +

    Outbound

    +
    + ++++++ + + + + + + + + + + + + + + + + + + + + + +

    Name

    Options

    Strength:

    Authoritative:

    Exclusive:

    Source

    +

    $user/name

    +

    Target

    +
    Script
    +
    +
    Relativity:
    +Include null inputs:
    +
    +
    +
    +
    Groovy
    +
    +
    'CN=' + name + iterationToken + ',CN=Users,DC=ad,DC=example,DC=edu'
    +
    +
    +
    +

    givenName

    +
    +
    +

    Outbound

    +
    + ++++++ + + + + + + + + + + + + + + + + + + +

    Name

    Options

    Strength:

    Authoritative:

    Exclusive:

    Source

    +

    givenName

    +

    Target

    +
    +

    instanceType

    +
    +
    +

    nTSecurityDescriptor

    +
    +
    +

    objectCategory

    +
    +
    +

    Outbound

    +
    + ++++++ + + + + + + + + + + + + + + + + + + + + + +

    Name

    Options

    Strength:

    Authoritative:

    Exclusive:

    Source

    Target

    +
    Value
    +
    +
    Relativity:
    +Include null inputs:
    +
    +
    +
    +
    XML
    +
    +
    CN=Person,CN=Schema,CN=Configuration,DC=ad,DC=example,DC=edu
    +
    +
    +
    +

    pwdLastSet

    +
    +
    +

    Outbound

    +
    + ++++++ + + + + + + + + + + + + + + + + + + + + + +

    Name

    Options

    Strength:

    Authoritative:

    Exclusive:

    Source

    Target

    +
    Value
    +
    +
    Relativity:
    +Include null inputs:
    +
    +
    +
    +
    XML
    +
    +
    -1
    +
    +
    +
    +

    sAMAccountName (Login name)

    +
    +
    +

    Outbound

    +
    + ++++++ + + + + + + + + + + + + + + + + + + +

    Name

    Options

    Strength:

    Authoritative:

    Exclusive:

    Source

    +

    $user/name

    +

    Target

    +
    +

    sn

    +
    +
    +

    Outbound

    +
    + ++++++ + + + + + + + + + + + + + + + + + + +

    Name

    Options

    Strength:

    Authoritative:

    Exclusive:

    Source

    +

    familyName

    +

    Target

    +
    +

    userPrincipalName

    +
    +
    +

    Outbound

    +
    + ++++++ + + + + + + + + + + + + + + + + + + + + + +

    Name

    Options

    Strength:

    Authoritative:

    Exclusive:

    Source

    +

    $user/name

    +

    Target

    +
    Script
    +
    +
    Relativity:
    +Include null inputs:
    +
    +
    +
    +
    Groovy
    +
    +
    name + iterationToken + '@ad.example.edu'
    +
    +
    +
    + + + +
    +
    +
    AD Group, ENTITLEMENT/group
    + +++++ + + + + + + + + + + + + + + + + + + + + + + + + +
    AttributeTypeDescription

    cn

    description

    dn

    +
    +
    Attribute Details
    +
    +

    cn

    +
    +
    +

    Inbounds

    +
    + ++++++ + + + + + + + + + + + + + + + + + + +

    Name

    Options

    Strength:

    Authoritative:

    Exclusive:

    Source

    Target

    +

    name

    +
    +
    +

    Outbound

    +
    + ++++++ + + + + + + + + + + + + + + + + + + +

    Name

    Options

    Strength:

    Authoritative:

    Exclusive:

    Source

    +

    $focus/name

    +

    Target

    +
    +

    description

    +
    +
    +

    Inbounds

    +
    + ++++++ + + + + + + + + + + + + + + + + + + +

    Name

    Options

    Strength:

    Authoritative:

    Exclusive:

    Source

    Target

    +

    description

    +
    +
    +

    Outbound

    +
    + ++++++ + + + + + + + + + + + + + + + + + + +

    Name

    Options

    Strength: strong

    Authoritative:

    Exclusive:

    Source

    +

    description

    +

    Target

    +
    +

    dn

    +
    +
    +

    Outbound

    +
    + ++++++ + + + + + + + + + + + + + + + + + + + + + +

    Name

    Options

    Strength:

    Authoritative:

    Exclusive:

    Source

    +

    $focus/name

    +

    Target

    +
    Script
    +
    +
    Relativity:
    +Include null inputs:
    +
    +
    +
    +
    Groovy
    +
    +
    'CN=' + name + ',CN=Users,DC=ad,DC=example,DC=edu'
    +
    +
    +
    +
    +
    + +
    +
    +

    2.6. Target: Computer science portal (CSV)

    +
    +

    2.6.1. Basic Information

    +
    Connector
    +
    +

    Resource uses connector. Artifact details:

    +
    +
    +
      +
    • +

      Connector type:

      +
    • +
    • +

      Connector version:

      +
    • +
    • +

      Connector bundle:

      +
    • +
    • +

      Namespace:

      +
    • +
    +
    +
    Connector Configuration
    + +++++ + + + + + + + + + @@ -3342,81 +4005,25 @@
    Connector Configuration
    - - + + - -
    ParameterValueDescription

    filePath

    /opt/midpoint/var/cs-portal.csv

    uniqueAttribute

    identifier

    fieldDelimiter

    ,

    -
    Capabilities
    -
    Native
    - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + + + - - + + +
    CapabilityOptions

    schema

    liveSync

    testConnection

    create

    update

    -
      -
    • -

      addRemoveAttributeValues: true

      -
    • -
    -

    delete

    script

    -
      -
    • -

      host:[com.evolveum.midpoint.xml.ns._public.resource.capabilities_3.ScriptCapabilityHostType@d2b2c01[language=<null>,type=RESOURCE], com.evolveum.midpoint.xml.ns._public.resource.capabilities_3.ScriptCapabilityHostType@26286229[language=<null>,type=CONNECTOR]]

      -
    • -
    -

    multivalueDelimiter

    ;

    read

    -
      -
    • -

      returnDefaultAttributesOption: false

      -
    • -
    -

    uniqueAttribute

    identifier

    -

    2.5.2. Object Types

    +

    2.6.2. Object Types

    Default Account
    @@ -3456,7 +4063,7 @@
    Default Accou
    -
    Attribute Details
    +
    Attribute Details

    courses

    @@ -3566,7 +4173,7 @@
    Attri
    -

    2.6. Target: Faculty portal (CSV)

    +

    2.7. Target: Faculty portal (CSV)

    -

    2.6.1. Basic Information

    -
    Connector
    +

    2.7.1. Basic Information

    +
    Connector
    -

    Resource uses CsvConnector connector. Artifact details:

    +

    Resource uses connector. Artifact details:

    -
    Connector Configuration
    +
    Connector Configuration
    @@ -3613,16 +4220,6 @@
    Connector Configuration
    - - - - - - - - - - @@ -3633,81 +4230,25 @@
    Connector Configuration
    - - + + - -

    multivalueDelimiter

    ;

    fieldDelimiter

    ,

    filePath

    /opt/midpoint/var/faculty-portal.csv

    uniqueAttribute

    uid

    fieldDelimiter

    ,

    -
    Capabilities
    -
    Native
    - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + + + - - + + +
    CapabilityOptions

    schema

    liveSync

    testConnection

    create

    update

    -
      -
    • -

      addRemoveAttributeValues: true

      -
    • -
    -

    delete

    script

    -
      -
    • -

      host:[com.evolveum.midpoint.xml.ns._public.resource.capabilities_3.ScriptCapabilityHostType@ce53036[language=<null>,type=RESOURCE], com.evolveum.midpoint.xml.ns._public.resource.capabilities_3.ScriptCapabilityHostType@6723d56[language=<null>,type=CONNECTOR]]

      -
    • -
    -

    multivalueDelimiter

    ;

    read

    -
      -
    • -

      returnDefaultAttributesOption: false

      -
    • -
    -

    uniqueAttribute

    uid

    -

    2.6.2. Object Types

    +

    2.7.2. Object Types

    Default Account
    @@ -3752,7 +4293,7 @@
    Default A
    -
    Attribute Details
    +
    Attribute Details

    familyName

    @@ -3927,7 +4468,7 @@
    Attri
    -

    2.7. Target: LDAP directory

    +

    2.8. Target: LDAP directory

    Main LDAP directory

    -

    2.7.1. Basic Information

    -
    Connector
    +

    2.8.1. Basic Information

    +
    Connector
    -

    Resource uses LdapConnector connector. Artifact details:

    +

    Resource uses connector. Artifact details:

    -
    Connector Configuration
    +
    Connector Configuration
    @@ -3977,13 +4518,18 @@
    Connector Configuration
    + + + + + - - + + @@ -3997,8 +4543,8 @@
    Connector Configuration
    - - + + @@ -4007,11 +4553,6 @@
    Connector Configuration
    - - - - - @@ -4026,132 +4567,38 @@
    Connector Configuration

    nsAccountLock

    - -

    port

    389

    host

    directory

    port

    389

    baseContext

    dc=internet2,dc=edu

    baseContext

    dc=internet2,dc=edu

    uidAttribute

    nsUniqueId

    uidAttribute

    nsUniqueId

    operationalAttributes

    memberOf

    -
    Results Handlers Configuration
    - ---- - - - - - - - - - - - - - - - - - - - - -
    ParameterValue

    enableAttributesToGetSearchResultsHandler

    false

    enableFilteredResultsHandler

    false

    enableNormalizingResultsHandler

    false

    -
    Capabilities
    -
    Native
    - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + +
    CapabilityOptions

    schema

    liveSync

    testConnection

    create

    update

    -
      -
    • -

      addRemoveAttributeValues: true

      -
    • -
    • -

      delta: true

      -
    • -
    -

    delete

    script

    -
      -
    • -

      host:[com.evolveum.midpoint.xml.ns._public.resource.capabilities_3.ScriptCapabilityHostType@78b8ed4[language=<null>,type=CONNECTOR]]

      -
    • -
    -

    credentials

    -
      -
    • -

      password:

      -
      -
        -
      • -

        returnedByDefault: false

        -
      • -
      -
      -
    • -
    -
    +
    Results Handlers Configuration
    + ++++ + - - + + + + - - + + - - + + + + + +

    auxiliaryObjectClasses

    ParameterValue

    pagedSearch

    enableAttributesToGetSearchResultsHandler

    false

    read

    -
      -
    • -

      returnDefaultAttributesOption: true

      -
    • -
    -

    enableFilteredResultsHandler

    false

    enableNormalizingResultsHandler

    false

    @@ -4629,7 +5076,7 @@
    -
    Attribute Details
    +
    Attribute Details

    cn

    @@ -4705,42 +5152,42 @@
    Attri
    -

    2.8. Target: Mailing lists (CSV)

    +

    2.9. Target: Mailing lists (CSV)

    -

    2.8.1. Basic Information

    -
    Connector
    +

    2.9.1. Basic Information

    +
    Connector
    -

    Resource uses CsvConnector connector. Artifact details:

    +

    Resource uses connector. Artifact details:

    -
    Connector Configuration
    +
    Connector Configuration
    @@ -4756,16 +5203,6 @@
    Connector Configuration
    - - - - - - - - - - @@ -4776,81 +5213,25 @@
    Connector Configuration
    - - + + - -

    multivalueDelimiter

    ;

    fieldDelimiter

    ,

    filePath

    /opt/midpoint/var/mailing-lists.csv

    uniqueAttribute

    uid

    fieldDelimiter

    ,

    -
    Capabilities
    -
    Native
    - ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + + + - - + + +
    CapabilityOptions

    schema

    liveSync

    testConnection

    create

    update

    -
      -
    • -

      addRemoveAttributeValues: true

      -
    • -
    -

    delete

    script

    -
      -
    • -

      host:[com.evolveum.midpoint.xml.ns._public.resource.capabilities_3.ScriptCapabilityHostType@2fe7ff8d[language=<null>,type=RESOURCE], com.evolveum.midpoint.xml.ns._public.resource.capabilities_3.ScriptCapabilityHostType@395bba0d[language=<null>,type=CONNECTOR]]

      -
    • -
    -

    multivalueDelimiter

    ;

    read

    -
      -
    • -

      returnDefaultAttributesOption: false

      -
    • -
    -

    uniqueAttribute

    uid

    -

    2.8.2. Object Types

    +

    2.9.2. Object Types

    Default Account
    @@ -4885,7 +5266,7 @@
    Default A
    -
    Attribute Details
    +
    Attribute Details

    lists

    @@ -4961,7 +5342,7 @@
    Attri
    -

    2.9. Target: Wordpress

    +

    2.10. Target: Wordpress

    Wordpress system

    -

    2.9.1. Basic Information

    -
    Connector
    +

    2.10.1. Basic Information

    +
    Connector
    -

    Resource uses WordpressRestConnector connector. Artifact details:

    +

    Resource uses connector. Artifact details:

    -
    Connector Configuration
    +
    Connector Configuration
    @@ -5057,8 +5438,8 @@
    Connector Configuration
    -
    Capabilities
    -
    Native
    +
    Capabilities
    +
    Native
    @@ -5070,52 +5451,6 @@
    Native
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Options

    schema

    testConnection

    create

    update

    delete

    script

    -
      -
    • -

      host:[com.evolveum.midpoint.xml.ns._public.resource.capabilities_3.ScriptCapabilityHostType@6a45d911[language=<null>,type=CONNECTOR]]

      -
    • -
    -

    addRemoveAttributeValues

    read

    -
      -
    • -

      returnDefaultAttributesOption: false

      -
    • -
    -
    Configured
    @@ -5129,98 +5464,10 @@
    Configured
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Options

    testConnection

    -
      -
    • -

      enabled: true

      -
    • -
    -

    create

    -
      -
    • -

      enabled: true

      -
    • -
    -

    update

    -
      -
    • -

      enabled: true

      -
    • -
    -

    delete

    -
      -
    • -

      enabled: true

      -
    • -
    -

    script

    -
      -
    • -

      host:[com.evolveum.midpoint.xml.ns._public.resource.capabilities_3.ScriptCapabilityHostType@2d865602[language=<null>,type=CONNECTOR]]

      -
    • -
    • -

      enabled: true

      -
    • -
    -

    addRemoveAttributeValues

    -
      -
    • -

      enabled: true

      -
    • -
    -

    read

    -
      -
    • -

      returnDefaultAttributesOption: false

      -
    • -
    • -

      enabled: true

      -
    • -
    -

    activation

    -
      -
    • -

      status

      -
    • -
    -
    -

    2.9.3. Synchronization

    +

    2.10.3. Synchronization

    Account sync policy, ACCOUNT/default
    @@ -5785,12 +6032,12 @@

    5. Roles

    Direct Wordpress Admin Role

    -

    9d31d997-c300-497a-86fc-5c90a96e7f95

    +

    $object.oid

    Direct Wordpress Editor Role

    -

    eb97c854-b7d1-43ce-81f2-551bbcf18c7d

    +

    $object.oid

    Metarole Wordpress Admin

    @@ -5813,6 +6060,11 @@

    5. Roles

    8da46694-bd71-4e1e-bfd7-73865ae2ea9a

    +

    role-ad-basic

    + +

    94a5b1b1-b7be-4ee5-a231-3f044d953448

    + +

    role-ldap-basic

    c89f31dd-8d4f-4e0a-82cb-58ff9d8c1b2f

    @@ -5848,7 +6100,11 @@

    5.6.

    +
    @@ -5871,19 +6127,19 @@

    6. Tasks

    -

    Groups: Full Reconciliation

    - -

    605a0127-a313-442a-9d5e-151eac8b0745

    +

    Grouper Livesync

    +

    Grouper live synchronization task for groups and users. It will poll changelog and pull in changes

    +

    552112fc-9546-4e63-a170-339d99a3455e

    -

    Groups: Group Scavenger

    +

    Groups: Reconcile groups/entitlements

    -

    1d7bef40-953e-443e-8e9a-ec6e313668c4

    +

    22625b6c-e9a7-4151-88f8-013abb1cc158

    -

    Groups: Live updates

    +

    Groups: Reconcile Users/accounts

    -

    47fc57bd-8c34-4555-9b9f-7087ff179860

    +

    95539396-14ce-4787-aaa8-c93e2aacfbc0

    Guests: Full Import

    @@ -5906,11 +6162,6 @@

    6. Tasks

    22c2a3d0-0961-4255-9eec-c550a79aeaaa

    -

    Trigger Scanner

    -

    A system task that executes triggers attached to objects.

    -

    00000000-0000-0000-0000-000000000007

    - -

    User recomputation

    83a737ea-5eb7-4e78-b431-331cccf02354

    @@ -5918,15 +6169,17 @@

    6. Tasks

    -

    6.1. Groups: Full Reconciliation

    - +

    6.1. Grouper Livesync

    +
    +

    Grouper live synchronization task for groups and users. It will poll changelog and pull in changes

    +
    @@ -5948,13 +6201,37 @@

    6.7. SIS: Ful

    -

    6.8. Trigger Scanner

    -
    -

    A system task that executes triggers attached to objects.

    +

    6.8. User recomputation

    + +
    +
    +

    7. Users

    +
    + +++++ + + + + + + + + + + + + + + +
    NameDescriptionOid

    banderson

    e897468f-20bd-419c-8fc5-1fe60e2600de

    @@ -5963,7 +6240,7 @@

    6.9. Us