> On Oct 24, 2016, at 1:34 AM, Patrick Brunmayr <[email protected]> wrote:
> 
> No the other way round! I would decorate Fortress roles and groups with
> an additional objectclass to have some
> 
> filter possibilities. Basically in my connector i would only query
> objects from fortress having aux class "exposeMidpoint"
> 
> to only expose those roles and groups. Not everything in Fortress should
> go to Midpoint :)

OK I’m starting to understand.  One more question….

The discriminator must limit which objects of a particular type will be 
processed?  In other words not all roles (or groups) within a fortress DIT need 
be processed by MP, but only a subset of each.

Reply via email to