Page tree
Skip to end of metadata
Go to start of metadata

Complex synchronization policy is composed from three somehow distinct parts:

  • Inbound phase of synchronization policy processing controls how information gets into midPoint. I.e. it controls the flow from accounts to user.
  • User policy phase of synchronization policy processing controls the content of user objects. It can be used to fill out missing user properties, enforce specific values, react to property change e.g. by automatically assigning roles, etc.
  • Outbound phase of synchronization policy processing controls how information gets out of midPoint. I.e. it controls the flow from user to accounts.

The composition of the three parts is illustrated in the following diagram.

The most significant part of each phase is application of mappings. The input and output of applied mappings is different for each phase. Following table provides the summary.

Phase

Mapping source

Mapping target

Inbound

Account (shadow)

User

User Policy

User

User

Outbound

User

Account (shadow)

The application of mappings and also other activities taken during the phases are illustrated in a simplified form in the following diagram.

Following sections contain detailed description of each individual phase.

Inbound Phase

User Policy Phase

Outbound Phase

  • No labels