On 16/04/2013 14:26, Martin van Es wrote:
I was wondering if it's possible to automatically provisioin certain
resource for one account based on a condition (attribute) set in the
source resource.
A hypothetical situation:
A CSVdir synchronisation resource contains all my users, some of which
initially need to have an LDAP account propagated, other a DB account
and a lucky few both.
Is there a way to specify a role attribute in the CSVdir resource that
gets mapped to a role, that assigns the LDAP and/or the DB resource
for the user? I tried creating two roles (LDAP/DB) with mappings to my
resources LDAP and DB, but in the interface, the assigned resources
are not preserved in the role definition dialog. Apart from that,
would this be a possibility in Syncope?
Hi Martin,
I've understood that you want to assign upon synchronization role A, B
or C to users from a CSVDir resource where A has assigned a LDAP
resource, B a DB resource and C both. Is this correct?
If so, you need to define a SyncJobActionsClass [1] or SyncActionsClass
[2] (depending on the Syncope version you are running) and implement
the logic "assign role A, B or C to synchronizing user" in the before()
method.
Once defined such class, you will need to associate it to the
synchronization task and it will be invoked upon synchronization.
Regards.
[1] https://cwiki.apache.org/confluence/display/SYNCOPE/SyncJobActionsClass
[2] https://cwiki.apache.org/confluence/display/SYNCOPE/SyncActionsClass
--
Francesco Chicchiriccò
ASF Member, Apache Syncope PMC chair, Apache Cocoon PMC Member
http://people.apache.org/~ilgrosso/
