Adventures in identity management
Lately I’ve been doing lots of work with logging various FIM-related data to SQL tables and presenting them with SQL Reporting Services (SSRS). I’ve been having some good fun with SSRS – there seems to be a lot you can do with just a basic understanding of queries and parameters – and I’m sure I’m…
R2 made a change to search scopes that I wasn’t particularly happy with – in fact as far as I’m concerned they broke search. The Advanced Filter was offered as a way to restore old functionality, however that introduced two new bugs – clicking search with nothing in the search box returned nothing (listed here as…
I’ve been thinking a lot lately about maintaining data quality in the FIM Portal. When you’re working with a lot of referenced objects (and it really is the best way to go in the Portal) you find yourself copying string data around a lot. So, for example, a person selects a business unit object from…
Just wanted to give a shout out to Alexey Skalozub who has shared a great looking utility on github to help us with those pesky FIM Portal configuration migrations: https://github.com/pieceofsummer/FIMDelta Essentially it’s a visualisation and selection tool for the changes.xml file produced by the Schema and Policy migration tools. The really great thing he’s done…
When trying to perform bulk operations against objects in FIM from PowerShell you can run into some pretty slow and heavy going queries. This little snippet shows how you can loop through each letter of the alphabet as a way to reduce the size of the batch of objects you deal with in one go.
I was asked today to implement notification emails on changes to certain groups. Like many situations with the FIM Portal this turned out to be trickier than expected. A number of the groups are criteria-based so don’t actually have a member attribute as such. With no member-update request happening there’s nothing to actually trigger a…
I have just spent a very frustrating day trying to figure out how to get access to the resource found by the EnumerateResourcesActivity, not helped even slightly by the usual machine-generated “documentation“. I’m still not very happy with it, and can’t for the life of me understand why it can’t give me a straight object collection…
R2 introduced a new property to the UpdateResourceActivity, CreateResourceActivity and DeleteResourceActivity classes called “ApplyAuthorizationPolicyProperty”. Setting this to “true” in your custom activity allows an Authorization activity to be triggered by an Action workflow. I have finally had an opportunity to try this out.
There has been a WMI way to get info about the Sync service, MAs and connector space objects since the MIIS days. There used to be a bunch of vbscript samples on TechNet but I’ve never seen them updated for PowerShell. The other day I wanted to produce a report of MA stats and thought…
To completely remove a binding and/or an attribute from the schema you need to do two things: Make sure it is removed from every MPR, Workflow, Set definition, Search Scope, Email Template etc. A simple way is to use the ExportPolicy script and then just search for the attribute in the resulting file. NULL the…