You can use the following attributes to determine the set of users in a given organization:
External (to Identity Manager) resource account attributes. In this case, you need both the resource account ID and the resource name (for example, acctid:resname) to find the matching Identity Manager user because more than one Identity Manager user might have the same acctid but on different resources.
Identity Manager user account attributes (for example, name, location, manager).
To get the “or’ed” effect, do not use multiple attribute conditions. Instead, use the “is one of” operator with a list of operands, as follows:
<list> <new class=’com.waveset.object.AttributeCondition’> <s>firstname</s> <s>is one of</s> <list> <s>Nicola</s> <s>Paolo</s> </list> </new> </list> |