
Resource wizard: Object type credentials
Since 4.9
This functionality is available since version 4.9.
|
Credentials allows you to define mappings for credentials, e.g. passwords.
Configuration for credentials contains similar panels as for activation, but contains only one kind of mapping and doesn’t contain any predefined mappings. Use the credentials mappings to either pass or generate the password.
The as is mappings are very simple as midPoint implies that the password will be passed from midPoint user password to resource object password (if supported by the resource and connector) or vice versa.
|
Each mapping also allows setting Lifecycle state.
This can be used during Simulations, e.g. specifying lifecycle state as Proposed
will be used only to simulate the credentials mapping, Draft
disables the credentials mapping etc.
Click btn:[Save settings] when done to return to the previous page from which you started the credentials editor.
You don’t need any credentials mappings if you are not managing the passwords in the resource (e.g. if you are using SSO with another system). |
Limitations
Resource wizard has several limitations, such as:
-
Expression editor supports As is, Script, Literal and Generate expressions only.
-
Mapping ranges are not supported.
-
Mapping domains are not supported.
-
Correlation configuration currently supports the
items
correlator only.
MidPoint resource wizard can’t show or edit these features but tolerates them and keeps them untouched if you configure them in XML.
See Also
Here are additional resources to explore:
-
Object Lifecycle: Gain a deeper understanding of object lifecycle management in midPoint.
-
Admin GUI Configuration: See configuration options for certain wizard panels and the GUI in general.