You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@syncope.apache.org by Lionel SCHWARZ <li...@in2p3.fr> on 2023/12/19 16:05:31 UTC
restricting ATTRS_TO_GET during PULL task
Dear all,
I'm looking a way to explicitely specify attributes to get from the external identity store when doing a PULL task.
https://syncope.apache.org/docs/reference-guide.html#tasks-pull does not help and I can't find in the code where attributeToGet are set in ConnID OperationOptions.
Is it possible then?
Regards,
Lionel
Re: restricting ATTRS_TO_GET during PULL task
Posted by Lionel SCHWARZ <li...@in2p3.fr>.
Hi Samuel,
Your first solution will probably fit my needs, although I think that allowing to specifiy attributes to get in PULL task description would be a nice feature.
Regards
Lionel
----- Le 5 Jan 24, à 10:32, Samuel Garofalo sgarofalo@apache.org a écrit :
> Hello Lionel,
>
> I suggest to clone the resource and use one of them for the regular full
> reconciliation for cheap attribute (removing from mapping expensive
> attributes) and the other one for all attributes.
>
> Otherwise you can use a pull action and in preprocess method, depending
> on the key of the pull task, you can remove the expensive attributes,
> but consider that, at this point, these attributes have already been
> read from the resource.
>
> Could this be a good solution for you?
>
> Best regards,
>
> Samuel
>
> Il 19/12/23 17:43, Lionel SCHWARZ ha scritto:
Re: restricting ATTRS_TO_GET during PULL task
Posted by Lionel SCHWARZ <li...@in2p3.fr>.
Hi Samuel,
Actually I would like to do the opposite ;), I would like to NOT manage certain attributes that are present in the mapping.
Can I do this with PullAction?
My use-case seems strange but it is the following:
Amongst PULL or BOTH attributes in the mapping some are cheap and some are expensive.
I would like to:
1. schedule a regular full reconciliation for cheap attributes only
2. be able to retrieve all attributes (cheap and expensive) on demand
Lionel
----- Le 19 Déc 23, à 17:23, Samuel Garofalo sgarofalo@apache.org a écrit :
> Hello Lionel,
>
> the attributes to pull are those specified in the resource mapping with
> purpose BOTH or PULL.
>
> If you need to manage others attribute not present in the mapping you
> can add a PullActions [1] that implements moreAttrsToGet which returns
> the set of attributes that you want to use.
>
> Best regards,
>
> Samuel
>
> [1]
> https://github.com/apache/syncope/blob/syncope-3.0.5/core/provisioning-api/src/main/java/org/apache/syncope/core/provisioning/api/pushpull/PullActions.java#L58
>
> Il 19/12/23 17:05, Lionel SCHWARZ ha scritto:
Re: restricting ATTRS_TO_GET during PULL task
Posted by Samuel Garofalo <sg...@apache.org>.
Hello Lionel,
the attributes to pull are those specified in the resource mapping with
purpose BOTH or PULL.
If you need to manage others attribute not present in the mapping you
can add a PullActions [1] that implements moreAttrsToGet which returns
the set of attributes that you want to use.
Best regards,
Samuel
[1]
https://github.com/apache/syncope/blob/syncope-3.0.5/core/provisioning-api/src/main/java/org/apache/syncope/core/provisioning/api/pushpull/PullActions.java#L58
Il 19/12/23 17:05, Lionel SCHWARZ ha scritto:
> Dear all,
>
> I'm looking a way to explicitely specify attributes to get from the external identity store when doing a PULL task.
> https://syncope.apache.org/docs/reference-guide.html#tasks-pull does not help and I can't find in the code where attributeToGet are set in ConnID OperationOptions.
> Is it possible then?
>
> Regards,
> Lionel