Adventures in identity management
In organisations with no established practise of IAM, introducing it can be an uphill battle. Attempts to introduce IAM for its own sake are often not successful – you need something else driving the project, something high profile with fixed deadlines and high-level sponsorship within the organisation.
I’ve posted before about Event Broker which is an indespensible part of my FIM installations these days. If you would like to see it in action there is going to be an online How-To Seminar on the 19th September 2012. Here’s the blurb with a contact email address at the bottom:
In a couple of days I’ll be off to TechEd New Zealand with TechEd Australia the following week. At each I am delivering two sessions on FIM Best Practices – and even with two sessions to fill there was a lot more I could have said! So watch out for a new blog series starting…
I upgraded a Dev server to R2 today. It seems to have gone ok though I have yet to test all the components. Here’s some quick observations:
A long time ago now I posted a basic SQL method of archiving the Requests history to another database. I’m still using this with FIM 2010 and have updated the method now to also grab info about Approvals. Note I haven’t tested this with R2.
I’ve publish a new script that will duplicate any object in the FIM Portal, naming it “Copy of ” plus the Display Name of the copied object. I’ve tested it on MPRs, Workflow Definitions, Sets, Search Scopes, Navigation Bar Resources, AIC’s … You can get it here.
I haven’t had much time for blogging lately as all spare time is going on TechEd prep. I’m very pleased this year to be be presenting two different but complimentary sessions on FIM Best Practises at both TechEd New Zealand and TechEd Australia. I hope people will go away understanding that IAM projects have their challenges, and…
I was trying to update a script so it could resolve references to various resource types. I’d seen in the help that you can do this: Export-FIMConfig -customConfig (“/ConstosoCustomResource”, “/Group”) So in my script I spent ages trying to construct a string like “(“/ConstosoCustomResource”, “/Group”)” and then wondering why it wouldn’t work.
I have finally had a need to update my import/export log archiving system so it now uses powershell to convert the XML directly to HTML, without relying on IE to do the rendering, as I was before. The idea is a script you run immediately after every Import and Export run profile. It will take…
Just going into prod with a major FIM solution and we found that approvals weren’t working. The request was sent, the email arrived, but when the user went to the Portal to attempt to respond to the request they got “Unable to process your request” immediately after clicking “Submit”.