Deep Resolution Capability for Criteria based Sets
Actual it is not possible over the service component to get Set members based on a Reference Attribut of the filtered objects. This is necessary if we design a reference class with other attributes and we want to generate Sets based on that references.
An example UseCase:
We want to model an Org-Chart with OrganizationalUnits and would like to assign Persons to this, but with additional information like startdate, enddate, jobtitle and so on. Based on this model it is now possible to let persons have multiple positions with multiple jobtitles and this in differenct Orgunits. Additional it is also possible to interact with datetimes, like the person will become the position in 3 month and leave them in 6 month and so on. So in our perspective this is a complex but really flexible data design.
Based on this design it should be possible to generate groups like "All active Person with someJobTitle on OrganizationalUnit A". This isn't possible out-of-the-Box right now. We could do some kind of stuffs with the SyncEngine or a custom WorkflowActivity like MIMWAL. But this has some really bad effects like disable ComputedMember functionality and do everything over the Request Pipeline (MIMWAL solution). But this is in large environments not really usable (performance). Or create more Set objects and filled out this ExplicitMembers over the SyncEngine. This is also not a nice solution, because we create even more objects and the complexity wouldn't by smaller.
To a better understanding a short picture about that problem case and so solution ideas in the attachment.
Thanks for your feedback! — David Steadman | MIM Lead & PM Identity governance and administration engineering team