Constraint evaluator

The extension is part of the Separation of Duties feature in Omada Identity.

Configuration and example

In this extension, specify the following attribute: CalculateSurvivor.

If a survivor is calculated (set to true): In case of a violation between two resource assignments, one of the resource assignments is allowed and the other one is blocked.

If a survivor is not calculated (set to false): the assignments in violation are immediately blocked. However, if one or more of these assignments are already provisioned into the target systems, they will not be deprovisioned before the blocking of the assignments has been approved in the violation evaluation process. They are sent to the "Pending deprovisioning" state.

<add type="Omada.RoPE.Controller.OISX.Extensions.ConstraintEvaluatorExtension, Omada.RoPE.Controller.OISX"> 
    <settings>
        <add key="CalculateSurvivor" value="false"/>  
    </settings>
</add>