Term · 3. Account Management & Provisioning
Shadow object
Definition
In MidPoint, a **shadow object** is a repository object of type `ShadowType` that represents an *account, entitlement, or other resource object* as seen by MidPoint on an external resource. It is the connector-facing projection of the external object and stores information needed for synchronization, reconciliation, and provisioning correlation. The shadow is not the authoritative source of the object’s business state; it is MidPoint’s managed representation of the resource-side object.
Related terms
-
Query Playground (QP)
In Evolveum midPoint, a **Query Playground (QP)** is an administrative UI page that allows authorized users to construct …
-
Access Control Rules (ACR)
Specific permissions or policy statements defining who can access what under which conditions. In RBAC: role-permission …
-
Access Request Process
Access Request Process is the structured set of steps through which a subject (such as a user, service account, or appli …
-
Account Management
Account management is the set of administrative and technical processes used to create, modify, disable, and delete user …
-
SailPoint Adaptive Identity
SailPoint marketing term for AI-driven identity governance approach — continuous risk scoring, ML-powered recommendation …
-
Aggregation (Aggr)
Process of collecting account and entitlement data from target systems into the IGA platform. Foundation for reconciliat …