Hi,

In PicketLink configuration, when we define an identity-object-type, we can use this option :

<option>

    <name>parentMembershipAttributeName</name>

    <value>member</value>

</option>

This said that if group1 have an attribute member with value is "group2", then group2 is the parent of group1.

Is there an option to make the opposite ?

If group1 have an attribute member with value is "group2", then group2 is the child of group1 ?

Thanks,

Romain