Adventures in identity management
Had a weird problem on a dev box. Whenever I launched Synchronization Service Manager, and sometimes even just when opening the properties of a MA, everything would stop while the server seemingly tried to install something in the background. Running taskmgr.exe revealed Microsoft.IdentityManagement.SolutionPackUtility.exe and TrustedInstaller.exe were running.
Regular readers of this blog will know that, a few months ago, I made a big move from Europe back to my native Australia. All our stuff finally turned up a couple of weeks ago, and while looking for something else on a harddrive I came across this recording I made which demonstrates part of…
Once upon a time we used to be able to write Advanced Flow Rules for reference attributes. Admittedly this sometimes led to horribly inefficient code, but it was useful – particluarly when paired with FindMVEntries to lookup and then reference an existing Metaverse object. With FIM we lost this capability, and Microsoft claim we were…
This is just an observation, and if anyone’s got any ideas or suggestions do let me know. I’m working on a FIM Sync service that I’ve upgraded from ILM by the database transfer method. I had to recreate one MA completely, and re-import and re-join all it’s objects. I was running some csexports against a…
Today I was trying to find a list of all attributes synchronized to Office365 by DirSync. I couldn’t find a published list so I figured I’d just get it from the MA, using powershell to extract the list of source attributes. The list of AD user attributes synchronized by DirSync is at the bottom of this…
From time to time it’s necessary to access detailed data about objects in the connector space of a FIM Sync MA. One way to do this is with the csexport command line tool (found in the Bin folder) but the XML it produces isn’t particularly pretty and it doesn’t open nicely in Excel. Luckily powershell…
I had numerous great chats at TechEd Australia about enterprise identity management and Office 365. This is a particular subject of interest to me, after the big, complex BPOS project I worked on for the last 18 months. I don’t believe there’s any official guidance on how to prepare identities for Office 365 in a…
Unify Solutions have a bunch of great add-on products for FIM 2010 and, now I’m working here, I have a chance to find out more about them. The first one I’ve been playing with is the FIM Event Broker, which is essentially a task scheduler for FIM Sync, with all sorts of great features like…
Microsoft are asking for feedback on FIM R2 at the moment. Even if you haven’t been testing R2, but have been working with the current release of FIM, you may well have opinions that the product group need to hear – well here’s your chance! At the very least, go have a look through the…
I just put together a workflow prototype for a project: when the membership of certain Criteria-based groups changes the groups’ Owners should be notified. This gave me an opportunity to use the EmailNotificationActivity inside a custom Workflow for the first time. As usual I found the official documentation to be somewhat … thin.