Projection policy

Alternative namesAssignment Policy Enforcement


MidPoint is usually fully enforcing projection consistency, which means that is a project should not exist (there is no assignment for it), the projection is deprovisioned (deleted or deactivated). E.g. if there is no role specifying that a particular account should exist, then such account is deleted. This is the usual approach for target resources. However, it does not work well for source resources, where appropriate assignment or role does not exist. In such cases, projection policy setting can be used to adjust the enforcement of projection consistency.


Version Introduction Guides Configuration Examples Plans
Development Projection Policy
4.8 Projection Policy


This feature is related to the following compliance frameworks:

Was this page helpful?
Thanks for your feedback