<?xml version="1.0" encoding="UTF-8"?>
<policy>
		<description>Email notifications for failed password publications</description>
		<rule>
			<description>Send e-mail for a failed publish password operation</description>
			<conditions>
				<and>
					<if-global-variable mode="nocase" name="notify-user-on-password-dist-failure" op="equal">true</if-global-variable>
					<if-operation op="equal">status</if-operation>
					<if-xpath op="true">self::status[@level != 'success']/operation-data/password-publish-status</if-xpath>
				</and>
			</conditions>
			<actions>
			<!-- generate email notification -->
			<do-send-email-from-template notification-dn="\cn=security\cn=Default Notification Collection" template-dn="\cn=security\cn=Default Notification Collection\cn=Password Sync Fail">
				<arg-string name="UserFullName">
					<token-src-attr name="Full Name">
						<arg-association>
							<token-xpath expression="self::status/operation-data/password-publish-status/association"/>
						</arg-association>
					</token-src-attr>
				</arg-string>
				<arg-string name="UserGivenName">
					<token-src-attr name="Given Name">
						<arg-association>
							<token-xpath expression="self::status/operation-data/password-publish-status/association"/>
						</arg-association>
					</token-src-attr>
				</arg-string>
				<arg-string name="UserLastName">
					<token-src-attr name="Surname">
						<arg-association>
							<token-xpath expression="self::status/operation-data/password-publish-status/association"/>
						</arg-association>
					</token-src-attr>
				</arg-string>
				<arg-string name="ConnectedSystemName">
					<token-global-variable name="ConnectedSystemName"/>
				</arg-string>
				<arg-string name="to">
					<token-src-attr name="Internet Email Address">
						<arg-association>
							<token-xpath expression="self::status/operation-data/password-publish-status/association"/>
						</arg-association>
					</token-src-attr>
				</arg-string>
				<arg-string name="FailureReason">
					<token-text/>
					<token-xpath expression="self::status/child::text()"/>
				</arg-string>
			</do-send-email-from-template>
		</actions>
	</rule>
</policy>



