Grouper Freshservice requester provisioner

import java.io.File; import java.io.FileReader; import java.sql.Timestamp; import java.util.ArrayList; import java.util.HashMap; import java.util.List; import java.util.Map; import java.util.*; import org.apache.commons.csv.*; import org.apache.commons.lang3.*; import org.apache.commons.logging.Log; import com.fasterxml.jackson.databind.*; import com.fasterxml.jackson.databind.node.*; import edu.internet2.middleware.grouper.*; import edu.internet2.middleware.grouper.CompositeSave; import edu.internet2.middleware.grouper.ai.openai.*; import edu.internet2.middleware.grouper.app.attestation.*; import edu.internet2.middleware.grouper.app.azure.GrouperAzureApiCommands; import edu.internet2.middleware.grouper.app.azure.GrouperAzureGroup; import edu.internet2.middleware.grouper.app.azure.GrouperAzureUser; import edu.internet2.middleware.grouper.app.externalSystem.*; import edu.internet2.middleware.grouper.app.grouperTypes.*; import edu.internet2.middleware.grouper.app.gsh.template.*; import edu.internet2.middleware.grouper.app.loader.*; import edu.internet2.middleware.grouper.app.loader.db.Hib3GrouperLoaderLog; import edu.internet2.middleware.grouper.app.provisioning.*; import edu.internet2.middleware.grouper.app.reports.*; import edu.internet2.middleware.grouper.attr.finder.*; import edu.internet2.middleware.grouper.attr.value.*; import edu.internet2.middleware.grouper.attr.*; import edu.internet2.middleware.grouper.attr.assign.*; import edu.internet2.middleware.grouper.authentication.*; import edu.internet2.middleware.grouper.cfg.text.*; import edu.internet2.middleware.grouper.exception.*; import edu.internet2.middleware.grouper.group.*; import edu.internet2.middleware.grouper.internal.dao.QueryOptions; import edu.internet2.middleware.grouper.ldap.*; import edu.internet2.middleware.grouper.membership.*; import edu.internet2.middleware.grouper.misc.*; import edu.internet2.middleware.grouper.util.*; import edu.internet2.middleware.grouperClient.jdbc.*; import edu.internet2.middleware.grouperClient.jdbc.tableSync.*; import edu.internet2.middleware.grouperClient.collections.MultiKey; import edu.internet2.middleware.subject.*; import edu.internet2.middleware.grouper.privs.*; public class Test159bsdFreshServiceDepartmentSync { private static final String FRESH_SERVICE_CONFIG_ID = "bsdFreshService"; private static final String PCOM_CONNECTION_NAME = "pennCommunity"; private static final int MAX_PAGE_SIZE = 100; private static final Set<String> doNotLogHeaders = GrouperUtil.toSet("authorization"); private static final Set<String> doNotLogParameters = GrouperUtil.toSet("client_secret"); private static final String NOT_USED_SUFFIX = " - NOT USED"; public static void main(String[] args) { Hib3GrouperLoaderLog hib3GrouperLoaderLog = OtherJobScript.retrieveHib3GrouperLoaderLogNotNull(); Map<String, Object> debugMap = new LinkedHashMap<String, Object>(); // Basic run metadata for troubleshooting (values must be scalar types only). debugMap.put("daemonConfigId", "bsdFreshServiceDepartmentSync"); debugMap.put("freshServiceExternalSystem", FRESH_SERVICE_CONFIG_ID); debugMap.put("runTimestamp", new Timestamp(System.currentTimeMillis()).toString()); GrouperSession grouperSession = null; try { grouperSession = GrouperSession.startRootSession(); // Step 1: Read what departments should be from the view // authzadm.AUTHZ_BSD_FRESHSERVICE_DEPTS_V@pcom has: ORG_CODE, DEPARTMENT_NAME_SHOULD_BE, ORG_DISPLAY_NAME, CENTER_NAME List<Object[]> deptsShouldBeRows = new GcDbAccess().connectionName(PCOM_CONNECTION_NAME). sql("select ORG_CODE, DEPARTMENT_NAME_SHOULD_BE from authzadm.AUTHZ_BSD_FRESHSERVICE_DEPTS_V"). selectList(Object[].class); debugMap.put("deptsShouldBeCount", GrouperUtil.length(deptsShouldBeRows)); // orgCode -> departmentNameShouldBe Map<String, String> deptsShouldBeMap = new LinkedHashMap<String, String>(); for (Object[] row : GrouperUtil.nonNull(deptsShouldBeRows)) { String orgCode = GrouperUtil.stringValue(row[0]); String departmentNameShouldBe = GrouperUtil.stringValue(row[1]); if (StringUtils.isNotBlank(orgCode) && StringUtils.isNotBlank(departmentNameShouldBe)) { deptsShouldBeMap.put(orgCode, departmentNameShouldBe); } } // Step 2: Read the tracking table of Freshservice departments with their IDs // authzadm.AUTHZ_BSD_FRESHSERVICE_DEPTS@pcom has: ORG_CODE, FRESH_SERVICE_DEPT_ID, FRESH_SERVICE_DEPT_NAME_IS List<Object[]> deptsTrackingRows = new GcDbAccess().connectionName(PCOM_CONNECTION_NAME). sql("select ORG_CODE, FRESH_SERVICE_DEPT_ID, FRESH_SERVICE_DEPT_NAME_IS from authzadm.AUTHZ_BSD_FRESHSERVICE_DEPTS"). selectList(Object[].class); debugMap.put("deptsTrackingCount", GrouperUtil.length(deptsTrackingRows)); // orgCode -> [freshServiceDeptId, freshServiceDeptNameIs] Map<String, Long> trackingOrgCodeToDeptId = new LinkedHashMap<String, Long>(); Map<String, String> trackingOrgCodeToDeptName = new LinkedHashMap<String, String>(); for (Object[] row : GrouperUtil.nonNull(deptsTrackingRows)) { String orgCode = GrouperUtil.stringValue(row[0]); Long freshServiceDeptId = GrouperUtil.longObjectValue(row[1], true); String freshServiceDeptNameIs = GrouperUtil.stringValue(row[2]); if (StringUtils.isNotBlank(orgCode) && freshServiceDeptId != null) { trackingOrgCodeToDeptId.put(orgCode, freshServiceDeptId); trackingOrgCodeToDeptName.put(orgCode, freshServiceDeptNameIs); } } // Step 3: Read all Freshservice departments from their API List<JsonNode> freshServiceDepts = retrieveDepartments(FRESH_SERVICE_CONFIG_ID); debugMap.put("freshServiceDeptsApiCount", GrouperUtil.length(freshServiceDepts)); // Build a map of freshServiceDeptId -> deptName from the API Map<Long, String> freshServiceDeptIdToName = new LinkedHashMap<Long, String>(); // Also build a map of orgCode prefix -> freshServiceDeptId for matching // Department names in Freshservice are prefixed with the ORG_CODE (e.g. "8342 - Penn First Plus") Map<String, Long> freshServiceOrgCodeToDeptId = new LinkedHashMap<String, Long>(); Map<String, String> freshServiceOrgCodeToDeptName = new LinkedHashMap<String, String>(); for (JsonNode deptNode : GrouperUtil.nonNull(freshServiceDepts)) { Long deptId = GrouperUtil.jsonJacksonGetLong(deptNode, "id"); String deptName = GrouperUtil.jsonJacksonGetString(deptNode, "name"); if (deptId != null && StringUtils.isNotBlank(deptName)) { freshServiceDeptIdToName.put(deptId, deptName); // Extract the org code prefix (the part before " - ") String orgCodePrefix = extractOrgCodePrefix(deptName); if (orgCodePrefix != null) { freshServiceOrgCodeToDeptId.put(orgCodePrefix, deptId); freshServiceOrgCodeToDeptName.put(orgCodePrefix, deptName); } } } // Step 4: Backfill tracking table for any Freshservice department (with an org code prefix) // that already exists in the API but is not yet in AUTHZ_BSD_FRESHSERVICE_DEPTS int backfillCount = 0; for (Map.Entry<String, Long> entry : freshServiceOrgCodeToDeptId.entrySet()) { String orgCode = entry.getKey(); Long freshDeptId = entry.getValue(); String freshDeptName = freshServiceOrgCodeToDeptName.get(orgCode); if (!trackingOrgCodeToDeptId.containsKey(orgCode)) { new GcDbAccess().connectionName(PCOM_CONNECTION_NAME). sql("insert into authzadm.AUTHZ_BSD_FRESHSERVICE_DEPTS (ORG_CODE, FRESH_SERVICE_DEPT_ID, FRESH_SERVICE_DEPT_NAME_IS) values (?, ?, ?)"). addBindVar(orgCode).addBindVar(freshDeptId).addBindVar(freshDeptName). executeSql(); trackingOrgCodeToDeptId.put(orgCode, freshDeptId); trackingOrgCodeToDeptName.put(orgCode, freshDeptName); backfillCount++; } } int insertsCount = 0; int updatesCount = 0; int notUsedCount = 0; // Step 5: Process new departments - org codes in deptsShouldBe but not in Freshservice for (Map.Entry<String, String> entry : deptsShouldBeMap.entrySet()) { String orgCode = entry.getKey(); String departmentNameShouldBe = entry.getValue(); // Check if this org code already exists in Freshservice (by org code prefix in the name) if (freshServiceOrgCodeToDeptId.containsKey(orgCode)) { // Already exists in Freshservice, will handle update below continue; } // New department: create in Freshservice JsonNode createdDept = createDepartment(FRESH_SERVICE_CONFIG_ID, departmentNameShouldBe); Long newDeptId = GrouperUtil.jsonJacksonGetLong(createdDept, "id"); if (newDeptId != null) { // Insert into tracking table new GcDbAccess().connectionName(PCOM_CONNECTION_NAME). sql("insert into authzadm.AUTHZ_BSD_FRESHSERVICE_DEPTS (ORG_CODE, FRESH_SERVICE_DEPT_ID, FRESH_SERVICE_DEPT_NAME_IS) values (?, ?, ?)"). addBindVar(orgCode).addBindVar(newDeptId).addBindVar(departmentNameShouldBe). executeSql(); // Update local maps so subsequent logic sees the new department trackingOrgCodeToDeptId.put(orgCode, newDeptId); trackingOrgCodeToDeptName.put(orgCode, departmentNameShouldBe); freshServiceOrgCodeToDeptId.put(orgCode, newDeptId); freshServiceOrgCodeToDeptName.put(orgCode, departmentNameShouldBe); freshServiceDeptIdToName.put(newDeptId, departmentNameShouldBe); insertsCount++; debugMap.put("createdDept_" + orgCode, departmentNameShouldBe + " (id=" + newDeptId + ")"); } } // Step 6: Update departments where name doesn't match for (Map.Entry<String, String> entry : deptsShouldBeMap.entrySet()) { String orgCode = entry.getKey(); String departmentNameShouldBe = entry.getValue(); // Find this org code in Freshservice Long freshDeptId = freshServiceOrgCodeToDeptId.get(orgCode); if (freshDeptId == null) { // This shouldn't happen since we just created missing ones, but skip if so continue; } String currentFreshServiceName = freshServiceOrgCodeToDeptName.get(orgCode); // If the current name in Freshservice doesn't match what it should be, update it if (!StringUtils.equals(currentFreshServiceName, departmentNameShouldBe)) { updateDepartment(FRESH_SERVICE_CONFIG_ID, freshDeptId, departmentNameShouldBe); // Update tracking table new GcDbAccess().connectionName(PCOM_CONNECTION_NAME). sql("update authzadm.AUTHZ_BSD_FRESHSERVICE_DEPTS set FRESH_SERVICE_DEPT_NAME_IS = ? where ORG_CODE = ?"). addBindVar(departmentNameShouldBe).addBindVar(orgCode). executeSql(); trackingOrgCodeToDeptName.put(orgCode, departmentNameShouldBe); updatesCount++; debugMap.put("updatedDept_" + orgCode, currentFreshServiceName + " -> " + departmentNameShouldBe); } } // Step 7: Mark departments as NOT USED if their org code is not in deptsShouldBe for (Map.Entry<String, Long> entry : freshServiceOrgCodeToDeptId.entrySet()) { String orgCode = entry.getKey(); Long freshDeptId = entry.getValue(); String currentName = freshServiceOrgCodeToDeptName.get(orgCode); // If this org code is NOT in deptsShouldBe, mark as not used if (!deptsShouldBeMap.containsKey(orgCode)) { // Only add suffix if not already there if (currentName != null && !currentName.endsWith(NOT_USED_SUFFIX)) { String notUsedName = currentName + NOT_USED_SUFFIX; updateDepartment(FRESH_SERVICE_CONFIG_ID, freshDeptId, notUsedName); // Update tracking table new GcDbAccess().connectionName(PCOM_CONNECTION_NAME). sql("update authzadm.AUTHZ_BSD_FRESHSERVICE_DEPTS set FRESH_SERVICE_DEPT_NAME_IS = ? where ORG_CODE = ?"). addBindVar(notUsedName).addBindVar(orgCode). executeSql(); notUsedCount++; debugMap.put("notUsedDept_" + orgCode, currentName + " -> " + notUsedName); } } } debugMap.put("backfillCount", backfillCount); debugMap.put("insertsCount", insertsCount); debugMap.put("updatesCount", updatesCount); debugMap.put("notUsedCount", notUsedCount); hib3GrouperLoaderLog.setInsertCount(backfillCount + insertsCount); hib3GrouperLoaderLog.setUpdateCount(updatesCount + notUsedCount); hib3GrouperLoaderLog.setTotalCount(freshServiceOrgCodeToDeptId.size()); } catch (RuntimeException re) { debugMap.put("exception", GrouperUtil.getFullStackTrace(re)); throw re; } finally { GrouperSession.stopQuietly(grouperSession); String debugMapForLog = GrouperUtil.toStringForLog(debugMap); hib3GrouperLoaderLog.setJobMessage(debugMapForLog); if (OtherJobScript.retrieveFromThreadLocal() == null) { System.out.println(debugMapForLog); System.exit(0); } } } /** * Extract the org code prefix from a Freshservice department name. * Department names are prefixed with the org code, e.g. "8342 - Penn First Plus". * The org code is the numeric part before " - ". * @param deptName the department name * @return the org code, or null if the name does not have the expected prefix */ private static String extractOrgCodePrefix(String deptName) { if (StringUtils.isBlank(deptName)) { return null; } // Remove " - NOT USED" suffix if present before extracting String nameForParsing = deptName; if (nameForParsing.endsWith(NOT_USED_SUFFIX)) { nameForParsing = nameForParsing.substring(0, nameForParsing.length() - NOT_USED_SUFFIX.length()); } int dashIndex = nameForParsing.indexOf(" - "); if (dashIndex > 0) { String prefix = nameForParsing.substring(0, dashIndex).trim(); // Verify it looks like an org code (numeric) if (StringUtils.isNumeric(prefix)) { return prefix; } } return null; } /** * Execute an HTTP method against the Freshservice API. * @param debugMap for logging * @param httpMethodName GET, POST, PUT, DELETE * @param configId the external system config id * @param urlSuffix the URL path after the base endpoint * @param allowedReturnCodes set of allowed HTTP return codes * @param returnCode array to receive the actual return code * @param bodyParam JSON body to send, or null * @param page page number for pagination, or null * @param addPageSize whether to add per_page parameter * @return the parsed JSON response, or null if empty */ private static JsonNode executeMethod(Map<String, Object> debugMap, String httpMethodName, String configId, String urlSuffix, Set<Integer> allowedReturnCodes, int[] returnCode, String bodyParam, Integer page, boolean addPageSize) { GrouperLoaderConfig grouperLoaderConfig = GrouperLoaderConfig.retrieveConfig(); GrouperHttpClient grouperHttpClient = new GrouperHttpClient(); grouperHttpClient.assignDoNotLogHeaders(doNotLogHeaders). assignDoNotLogParameters(doNotLogParameters); WsBearerTokenExternalSystem. attachAuthenticationToHttpClient(grouperHttpClient, configId, grouperLoaderConfig, debugMap); String url = grouperLoaderConfig.propertyValueStringRequired("grouper.wsBearerToken." + configId + ".endpoint"); if (url.endsWith("/")) { url = url.substring(0, url.length() - 1); } url += (urlSuffix.startsWith("/") ? "" : "/") + urlSuffix; debugMap.put("url", url); grouperHttpClient.assignUrl(url); grouperHttpClient.assignGrouperHttpMethod(httpMethodName); if (StringUtils.isNotBlank(bodyParam)) { grouperHttpClient.assignBody(bodyParam); } if (page != null && page > 0) { grouperHttpClient.addUrlParameter("page", Integer.toString(page)); } if (addPageSize) { int pageSize = grouperLoaderConfig.propertyValueInt("grouper.wsBearerToken." + configId + ".pageSize", MAX_PAGE_SIZE); grouperHttpClient.addUrlParameter("per_page", Integer.toString(pageSize)); } if (httpMethodName.equals("POST") || httpMethodName.equals("PUT")) { grouperHttpClient.addHeader("Content-Type", "application/json; charset=utf-8"); } grouperHttpClient.executeRequest(); int code = -1; String json = null; try { code = grouperHttpClient.getResponseCode(); returnCode[0] = code; json = grouperHttpClient.getResponseBody(); } catch (Exception e) { throw new RuntimeException("Error connecting to '" + debugMap.get("url") + "'", e); } if (!allowedReturnCodes.contains(code)) { throw new RuntimeException( "Invalid return code '" + code + "', expecting: " + GrouperUtil.setToString(allowedReturnCodes) + ". '" + debugMap.get("url") + "' " + json); } if (StringUtils.isBlank(json)) { return null; } try { JsonNode rootNode = GrouperUtil.jsonJacksonNode(json); return rootNode; } catch (Exception e) { throw new RuntimeException("Error parsing response: '" + json + "'", e); } } /** * Retrieve all departments from Freshservice API (paginated). * GET /api/v2/departments * @param configId the external system config id * @return list of department JsonNodes */ private static List<JsonNode> retrieveDepartments(String configId) { Map<String, Object> debugMap = new LinkedHashMap<String, Object>(); debugMap.put("method", "retrieveDepartments"); List<JsonNode> results = new ArrayList<JsonNode>(); try { boolean lastPage = false; int page = 1; GrouperLoaderConfig grouperLoaderConfig = GrouperLoaderConfig.retrieveConfig(); while (!lastPage) { int[] ignoreReturnCode = new int[1]; ignoreReturnCode[0] = -1; JsonNode jsonNode = executeMethod(debugMap, "GET", configId, "api/v2/departments", GrouperUtil.toSet(200), ignoreReturnCode, null, page, true); ArrayNode departmentsArray = (ArrayNode) jsonNode.get("departments"); for (int i = 0; i < (departmentsArray == null ? 0 : departmentsArray.size()); i++) { results.add(departmentsArray.get(i)); } page++; if (departmentsArray == null || departmentsArray.size() < grouperLoaderConfig.propertyValueInt("grouper.wsBearerToken." + configId + ".pageSize", MAX_PAGE_SIZE)) { lastPage = true; } } } catch (RuntimeException re) { debugMap.put("exception", GrouperUtil.getFullStackTrace(re)); throw re; } return results; } /** * Create a department in Freshservice. * POST /api/v2/departments * @param configId the external system config id * @param name the department name * @return the created department JsonNode (contains id, name, etc.) */ private static JsonNode createDepartment(String configId, String name) { Map<String, Object> debugMap = new LinkedHashMap<String, Object>(); debugMap.put("method", "createDepartment"); try { ObjectNode jsonToSend = GrouperUtil.jsonJacksonNode(); jsonToSend.put("name", name); String jsonStringToSend = GrouperUtil.jsonJacksonToString(jsonToSend); int[] returnCode = new int[1]; returnCode[0] = -1; JsonNode jsonNode = executeMethod(debugMap, "POST", configId, "api/v2/departments", GrouperUtil.toSet(200, 201), returnCode, jsonStringToSend, null, false); JsonNode departmentNode = GrouperUtil.jsonJacksonGetNode(jsonNode, "department"); return departmentNode; } catch (RuntimeException re) { debugMap.put("exception", GrouperUtil.getFullStackTrace(re)); throw re; } } /** * Update a department in Freshservice. * PUT /api/v2/departments/{id} * @param configId the external system config id * @param departmentId the Freshservice department ID * @param name the new department name * @return the updated department JsonNode */ private static JsonNode updateDepartment(String configId, Long departmentId, String name) { Map<String, Object> debugMap = new LinkedHashMap<String, Object>(); debugMap.put("method", "updateDepartment"); try { ObjectNode jsonToSend = GrouperUtil.jsonJacksonNode(); jsonToSend.put("name", name); String jsonStringToSend = GrouperUtil.jsonJacksonToString(jsonToSend); int[] returnCode = new int[1]; returnCode[0] = -1; JsonNode jsonNode = executeMethod(debugMap, "PUT", configId, "api/v2/departments/" + String.valueOf(departmentId), GrouperUtil.toSet(200), returnCode, jsonStringToSend, null, false); JsonNode departmentNode = GrouperUtil.jsonJacksonGetNode(jsonNode, "department"); return departmentNode; } catch (RuntimeException re) { debugMap.put("exception", GrouperUtil.getFullStackTrace(re)); throw re; } } } // comment out call main for daemon //Test159bsdFreshServiceDepartmentSync.main(null);

provisioner.bsdFreshService.addDisabledFullSyncDaemon = true provisioner.bsdFreshService.addDisabledIncrementalSyncDaemon = true provisioner.bsdFreshService.class = edu.internet2.middleware.grouper.app.freshServiceRequester.FreshRequesterProvisioner provisioner.bsdFreshService.customizeEntityCrud = true provisioner.bsdFreshService.customizeGroupCrud = true provisioner.bsdFreshService.customizeMembershipCrud = true provisioner.bsdFreshService.deleteEntities = true provisioner.bsdFreshService.deleteEntitiesIfNotExistInGrouper = true provisioner.bsdFreshService.deleteGroups = true provisioner.bsdFreshService.deleteGroupsIfNotExistInGrouper = true provisioner.bsdFreshService.deleteMemberships = true provisioner.bsdFreshService.deleteMembershipsIfNotExistInGrouper = true provisioner.bsdFreshService.entity2advanced = true provisioner.bsdFreshService.entityAttributeValueCache0entityAttribute = id provisioner.bsdFreshService.entityAttributeValueCache0has = true provisioner.bsdFreshService.entityAttributeValueCache0source = target provisioner.bsdFreshService.entityAttributeValueCache0type = entityAttribute provisioner.bsdFreshService.entityAttributeValueCache1entityAttribute = email provisioner.bsdFreshService.entityAttributeValueCache1has = true provisioner.bsdFreshService.entityAttributeValueCache1source = target provisioner.bsdFreshService.entityAttributeValueCache1type = entityAttribute provisioner.bsdFreshService.entityAttributeValueCacheHas = true provisioner.bsdFreshService.entityMatchingAttribute0name = email provisioner.bsdFreshService.entityMatchingAttribute1name = email provisioner.bsdFreshService.entityMatchingAttributeCount = 2 provisioner.bsdFreshService.entityResolver.columnNames = penn_id, pennkey, first_name, last_name, name, email, title, department_id, phone_number provisioner.bsdFreshService.entityResolver.entityAttributesNotInSubjectSource = true provisioner.bsdFreshService.entityResolver.resolveAttributesWithSQL = true provisioner.bsdFreshService.entityResolver.selectAllSQLOnFull = false provisioner.bsdFreshService.entityResolver.sqlConfigId = pennCommunity provisioner.bsdFreshService.entityResolver.sqlMappingEntityAttribute = subjectId provisioner.bsdFreshService.entityResolver.sqlMappingType = entityAttribute provisioner.bsdFreshService.entityResolver.subjectSearchMatchingColumn = penn_id provisioner.bsdFreshService.entityResolver.subjectSourceIdColumn = pennperson provisioner.bsdFreshService.entityResolver.tableOrViewName = authz_bsd_freshservice_users_v provisioner.bsdFreshService.freshserviceExternalSystemConfigId = bsdFreshService provisioner.bsdFreshService.groupAllowedToView = penn\u003Aevp\u003AbusinessServices\u003Aapps\u003AfreshService\u003Asecurity\u003AfreshServiceProvisioningReaders provisioner.bsdFreshService.groupAttributeValueCache0groupAttribute = id provisioner.bsdFreshService.groupAttributeValueCache0has = true provisioner.bsdFreshService.groupAttributeValueCache0source = target provisioner.bsdFreshService.groupAttributeValueCache0type = groupAttribute provisioner.bsdFreshService.groupAttributeValueCache1groupAttribute = name provisioner.bsdFreshService.groupAttributeValueCache1has = true provisioner.bsdFreshService.groupAttributeValueCache1source = target provisioner.bsdFreshService.groupAttributeValueCache1type = groupAttribute provisioner.bsdFreshService.groupAttributeValueCacheHas = true provisioner.bsdFreshService.groupIdOfUsersToProvision = penn\u003Aevp\u003AbusinessServices\u003Aapps\u003AfreshService\u003Aservice\u003Apolicy\u003AfreshServiceRequesters provisioner.bsdFreshService.groupMatchingAttribute0name = id provisioner.bsdFreshService.groupMatchingAttribute1name = name provisioner.bsdFreshService.groupMatchingAttributeCount = 2 provisioner.bsdFreshService.hasTargetEntityLink = true provisioner.bsdFreshService.hasTargetGroupLink = true provisioner.bsdFreshService.logAllObjectsVerbose = true provisioner.bsdFreshService.logAllObjectsVerboseToLogFile = false provisioner.bsdFreshService.logCommandsOnError = true provisioner.bsdFreshService.logCompareCalculations = true provisioner.bsdFreshService.makeChangesToEntities = true provisioner.bsdFreshService.numberOfEntityAttributes = 9 provisioner.bsdFreshService.numberOfGroupAttributes = 3 provisioner.bsdFreshService.operateOnGrouperEntities = true provisioner.bsdFreshService.operateOnGrouperGroups = true provisioner.bsdFreshService.operateOnGrouperMemberships = true provisioner.bsdFreshService.provisioningType = membershipObjects provisioner.bsdFreshService.removeAccentedChars = true provisioner.bsdFreshService.selectAllEntities = true provisioner.bsdFreshService.showAdvanced = true provisioner.bsdFreshService.showAssigningProvisioning = true provisioner.bsdFreshService.startWith = this is start with read only provisioner.bsdFreshService.subjectSourcesToProvision = pennperson provisioner.bsdFreshService.targetEntityAttribute.0.name = id provisioner.bsdFreshService.targetEntityAttribute.1.name = email provisioner.bsdFreshService.targetEntityAttribute.1.showAdvancedAttribute = true provisioner.bsdFreshService.targetEntityAttribute.1.showAttributeValidation = true provisioner.bsdFreshService.targetEntityAttribute.1.translateExpressionType = grouperProvisioningEntityField provisioner.bsdFreshService.targetEntityAttribute.1.translateFromGrouperProvisioningEntityField = subjectIdentifier1 provisioner.bsdFreshService.targetEntityAttribute.1.unprovisionableIfNull = true provisioner.bsdFreshService.targetEntityAttribute.2.name = firstName provisioner.bsdFreshService.targetEntityAttribute.2.translateExpression = \u0024{grouperProvisioningEntity.retrieveAttributeValueString('entityAttributeResolverSql__first_name')} provisioner.bsdFreshService.targetEntityAttribute.2.translateExpressionType = translationScript provisioner.bsdFreshService.targetEntityAttribute.3.name = lastName provisioner.bsdFreshService.targetEntityAttribute.3.translateExpression = \u0024{grouperProvisioningEntity.retrieveAttributeValueString('entityAttributeResolverSql__last_name')} provisioner.bsdFreshService.targetEntityAttribute.3.translateExpressionType = translationScript provisioner.bsdFreshService.targetEntityAttribute.4.name = jobTitle provisioner.bsdFreshService.targetEntityAttribute.4.translateExpression = \u0024{grouperProvisioningEntity.retrieveAttributeValueString('entityAttributeResolverSql__title')} provisioner.bsdFreshService.targetEntityAttribute.4.translateExpressionType = translationScript provisioner.bsdFreshService.targetEntityAttribute.5.name = workPhoneNumber provisioner.bsdFreshService.targetEntityAttribute.5.translateExpression = \u0024{grouperProvisioningEntity.retrieveAttributeValueString('entityAttributeResolverSql__phone_number')} provisioner.bsdFreshService.targetEntityAttribute.5.translateExpressionType = translationScript provisioner.bsdFreshService.targetEntityAttribute.6.name.elConfig = \u0024{'customField_pennkey'} provisioner.bsdFreshService.targetEntityAttribute.6.translateExpressionType = grouperProvisioningEntityField provisioner.bsdFreshService.targetEntityAttribute.6.translateFromGrouperProvisioningEntityField = subjectIdentifier0 provisioner.bsdFreshService.targetEntityAttribute.7.name.elConfig = \u0024{'customField_penn_id'} provisioner.bsdFreshService.targetEntityAttribute.7.translateExpressionType = grouperProvisioningEntityField provisioner.bsdFreshService.targetEntityAttribute.7.translateFromGrouperProvisioningEntityField = subjectId provisioner.bsdFreshService.targetEntityAttribute.8.name = departmentId provisioner.bsdFreshService.targetEntityAttribute.8.translateExpression = \u0024{grouperProvisioningEntity.retrieveAttributeValueString('entityAttributeResolverSql__department_id')} provisioner.bsdFreshService.targetEntityAttribute.8.translateExpressionType = translationScript provisioner.bsdFreshService.targetGroupAttribute.0.name = id provisioner.bsdFreshService.targetGroupAttribute.1.name = name provisioner.bsdFreshService.targetGroupAttribute.1.translateExpressionType = grouperProvisioningGroupField provisioner.bsdFreshService.targetGroupAttribute.1.translateFromGrouperProvisioningGroupField = displayExtension provisioner.bsdFreshService.targetGroupAttribute.2.name = description provisioner.bsdFreshService.targetGroupAttribute.2.translateExpressionType = grouperProvisioningGroupField provisioner.bsdFreshService.targetGroupAttribute.2.translateFromGrouperProvisioningGroupField = description