Resource wizard: Association type provisioning to resource for subject

Last modified 21 Jan 2025 15:47 +01:00
Since 4.9
This functionality is available since version 4.9.
Table of Contents

On this page we can create provisioning rule(s) to specify how midPoint should create the association information and transform it to resource data, typically from assignments.

table new
Figure 1. Provisioning to resource

The first steps are the same as for provisioning from resources, we need to create a new rule.

Click btn:[Add provisioning rule] to create a new provisioning rule.

step 1 basic configuration
Figure 2. Main configuration of association outbound mapping

We can configure basic attributes of the provisioning rule:

  • Name is used to uniquely name this rule

  • Strength allows the association mapping strength to be set

  • Lifecycle state allows defining the lifecycle state, e.g. Proposed for simulation of the provisioning rule.

Click btn:[Save settings].

Further configuration is required.

choice part
Figure 3. Provisioning to resource wizard

Basic Attributes tile allows returning back to the basic provisioning rule attributes definition. Other tiles are described below.

Mapping

In this step, you can configure the mapping for creating the associations (outbound).

step 2 mapping
Figure 4. Provisioning to resource mappings

Create a new mapping using btn:[Add outbound] that defines the transformation of midPoint data to association data (outbound).

  • Name is needed to uniquely identify this mapping

  • Source should be kept as it is

  • Expression: we can use the expression Association from link which means associate with the entitlement owned by the assigned role.

  • To resource attribute should be kept as it is

  • Lifecycle state allows you to define the lifecycle state. This can be used during Simulations.

The detailed steps for mapping include the same steps as editing the mapping of the object type.

Click btn:[Save mappings] when done to return to the previous page from which you started the mapping editor.

Configuration of resource wizard panels

Some wizard panels are configurable, for more information see Wizard panels.

How to use Lifecycle state

Resource, object type, attribute, mapping, synchronization situation and other aspects of resource configuration can be configured in different lifecycle states. As it was mentioned earlier, the Lifecycle state property can be used with Simulations. The resource is created in Proposed lifecycle state by default, it won’t work for normal deployment without switching to Active state.

By using the lifecycle state Proposed, you can test (simulate) the configuration without causing any damage to your target system data. When the simulation results are satisfactory, you can switch the lifecycle state to Active.

As the lifecycle state can be set on various configuration items, midPoint gives you a way of turning on specific parts of configuration incrementally. For example, after you switch your resource to Active lifecycle state, we recommend to add any new mappings first in Proposed lifecycle state. The new mapping can be simulated without causing any harm and switched to Active lifecycle state when ready.

See also:

Limitations

Resource wizard has several limitations as of midPoint 4.8, such as:

midPoint resource wizard won’t be able to show or allow editing of these features but should tolerate them and keep them in the configuration.

Was this page helpful?
YES NO
Thanks for your feedback