Hello all,
it is OIM v9.0.
Mappings in a SCIM project can be automatically created/generated based on default templates and the schemas provided, one of them is the default "SCIM synchronization" template.
In our case, both User as well as Group schemas include properties to read memberships (we have User.groups and Group.members).
Group.members is defined as ReadWrite property, so the one to use for provisioning.
User.groups is defined as ReadOnly, i.e. no provisioning would be possible.
The problem is, the automatically generated mapping chooses User schema to provision memberships, that obviously does not work.
Is there any easy solution to fix it in advance (at the time one creates a SCIM project), is it the only option to load schema files manually, i.e. to remove User.groups attribute in the schema? Or any other ideas how to say to the system to use Group.members instead of the other one?
Thanks in advance and best regards,
Alexey