Synchronization mechanism makes sure that the state of accounts corresponds to the state of the user that owns them with respect to the configured policies. For this to work properly there needs to be a way how to set which user owns which account. Account linking is used as a primary mechanisms for this. The links are created automatically when account is created as a consequence of user modification (e.g. a role is assigned to the user).

However, there may be accounts that existed before the IDM solution was deployed. Or accounts that were created outside midPoint. ..... TODO .....

Correlation Expression

The goal of correlation expression is to (quickly and efficiently) find a list of candidate owners. Correlation expression is in fact just a (parametric) search query. See midPoint Query Language page for more details.

Confirmation Expression

TODO