Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision | Next revision Both sides next revision | ||
|
tutorial:dev:ad_groups_sync_workflow [2019/03/06 09:59] hanakp [Set aplication properties] |
tutorial:dev:ad_groups_sync_workflow [2019/08/29 13:35] stloukalp |
||
|---|---|---|---|
| Line 10: | Line 10: | ||
| * provisioning of membership of identities to another system | * provisioning of membership of identities to another system | ||
| * resolve membership - users already have assigned groups in another system | * resolve membership - users already have assigned groups in another system | ||
| + | |||
| + | <note tip>For management of membership there is currently a few special chars, which are unsupported. In name of roles, there cannot be: " ' \</ | ||
| Line 58: | Line 60: | ||
| * **idm.pub.acc.syncRole.roles.allToOneCatalog** - (default: null) - Add name of catalog. all roles will be added to this ' | * **idm.pub.acc.syncRole.roles.allToOneCatalog** - (default: null) - Add name of catalog. all roles will be added to this ' | ||
| * **idm.pub.acc.syncRole.roles.attributeNameOfMembership** - (default: member) - it is name of attribute of role in source system, which holds identificators of identities | * **idm.pub.acc.syncRole.roles.attributeNameOfMembership** - (default: member) - it is name of attribute of role in source system, which holds identificators of identities | ||
| + | * **idm.pub.acc.syncRole.roleCatalog.catalogueTreeInOneCatalog** - (default: null) - if creating of catalog like DN is enabled, this property will create tree of catalogues under root catalog. Name of this root catalog set in this property. | ||
| + | * **idm.pub.acc.syncRole.roleSystem.forwardManagement.value** - (default: false) - When role is created with connected system and it manages membership. In this case there is option ' | ||
| + | * **idm.pub.acc.syncRole.roleSystem.update.manageforwardManagement** - (default: false) - This property will manage ' | ||
| + | * **idm.pub.acc.syncRole.roles.nameOfRoles.doNotSentValueOnExclusion** - (default: null) - On role create with connected system and system attribute, there is option, this attribute will be skipped on excluded contract. Add to this property names of roles separeted with comma. (does not work with roles, which has comma in name) | ||
| + | * **idm.pub.acc.syncRole.roles.update.nameOfRoles.manageSentValueOnExclusion** - (default: false) - This property will manage skip of attribute option even on update roles. | ||
| ===== Set attributes activity ===== | ===== Set attributes activity ===== | ||