<objectType>
         <kind>entitlement</kind>
         <intent>group</intent>
         <displayName>AD Group</displayName>
         <default>true</default>
         <objectClass>ri:CustomGroupObjectClass</objectClass>
         <attribute>
            <c:ref>ri:samAccountName</c:ref>
            <matchingRule xmlns:mr="http://prism.evolveum.com/xml/ns/public/matching-rule-3">mr:stringIgnoreCase</matchingRule>
            <tolerant>false</tolerant>
            <exclusiveStrong>false</exclusiveStrong>
            <inbound>
               <authoritative>false</authoritative>
               <exclusive>false</exclusive>
               <strength>normal</strength>
               <target>
                  <c:path>$focus/name</c:path>
               </target>
            </inbound>
         </attribute>
         <attribute>
            <c:ref>ri:description</c:ref>
            <tolerant>false</tolerant>
            <exclusiveStrong>false</exclusiveStrong>
            <inbound>
               <target>
                  <c:path>$focus/description</c:path>
               </target>
            </inbound>
         </attribute>
         <attribute>
            <c:ref>icfs:name</c:ref>
            <tolerant>true</tolerant>
            <exclusiveStrong>false</exclusiveStrong>
            <inbound>
               <authoritative>true</authoritative>
               <exclusive>false</exclusive>
               <strength>normal</strength>
               <target>
                  <c:path>$focus/identifier</c:path>
               </target>
            </inbound>
         </attribute>
      </objectType>