Class TrueFoundryTargetDao

java.lang.Object
edu.internet2.middleware.grouper.app.provisioning.targetDao.GrouperProvisionerTargetDaoBase
edu.internet2.middleware.grouper.app.truefoundry.TrueFoundryTargetDao

public class TrueFoundryTargetDao extends GrouperProvisionerTargetDaoBase
TrueFoundry TargetDao — manages users, teams, roles, and team memberships via the TrueFoundry native REST API. Entity ID note: The provisioning entity ID is the native TrueFoundry user ID (e.g. "pt3vuwlxupmefpk8i9cj11du"). The email address is stored as a separate attribute and is used for API calls (register, deactivate, role assignment, team membership). The native ID is used for SCIM display name updates (PATCH /scim/v2/{tenant}/{sso}/Users/{nativeId}). Team membership note: TrueFoundry has no individual add/remove member endpoints. Team membership is managed by replacing the full member list via PUT /teams. insertMembership and deleteMembership for teams both retrieve the current team state, modify the member list, and PUT the full manifest back. Role membership note: Role assignments are read from the rolesWithResource array on each user returned by the subjects endpoint. insertMembership assigns a role to a user; deleteMembership assigns the configured default role.