Grouper MidPoint provisioner example with metadata attributes
Overview
This example configures a MidPoint provisioner named mp that lets users choose, per group, which targets (Shibboleth or Box) the group provisions to, and specify the Shibboleth SP entity IDs for each group. The target list and the entity IDs are carried as metadata attributes and translated into target group attributes.
This example was built with Grouper v2.6.18. The MidPoint provisioner is a current feature, available in all currently supported releases (class edu.internet2.middleware.grouper.app.midpointProvisioning.MidPointProvisioner, introduced 2022).
Privileges: editing a provisioner's configuration requires Grouper administrator (sysadmin) access, with the configuration editor in read-write mode. Marking a group or folder as provisionable requires administrative privilege on that object.
Mark as provisionable
On the group's "Provisioning" screen, set "Target name" to mp, choose to provision the object, enter the "Shibboleth SP entity IDs", and select the targets ("shibboleth" and/or "box").
Data in database
The selections above are stored as rows in the provisioner's group-attributes table (gr_mp_group_attributes): a target row per selected target and a shibbolethEntityIds row per entity ID.