Adventures in identity management
I’ve shared the new version of the documentation scripts here: https://unifysolutions.jira.com/wiki/display/FIMTEAMCOM/Automatic+Word+Documentation The best new feature is in Document_SyncConfig.ps1 which now includes an end-to-end attribute flow map based around Metaverse object/attribute – so showing all IAFs and EAFs going via each Metaverse attribute.
Listening to Andy van den Biggelaar’s FIM Team User Group session on Reporting this week reminded me that I haven’t shared the latest versions of my Requests and Approvals archiving scripts, and I also haven’t shared the scripts I now use to log Sync runs and convert import and export log files to CSV, ready for…
I’ve uploaded a Sync Service auto-documentation script to the FIM Team Scripts site, to go with the Portal one I shared a couple of months back. You can get them both here:Â https://unifysolutions.jira.com/wiki/display/FIMTEAMCOM/Automatic+Word+Documentation
I was asked to evaluate the impact of ticking “Allow Nulls” on the AD export flow for ‘manager’ when it was realised that some people had a manager set in AD, while in FIM they had none. This can be a hard change to test in Dev or Test environments which don’t have the full…
I’ve just installed FIM R2 reporting in an environment that had an existing System Center Data Warehouse infrastructure based on SC 2012 R2 and SQL 2012. I had a couple of problems along the way so here are the troubleshooting notes.
Lately I’ve been doing lots of work with logging various FIM-related data to SQL tables and presenting them with SQL Reporting Services (SSRS). I’ve been having some good fun with SSRS – there seems to be a lot you can do with just a basic understanding of queries and parameters – and I’m sure I’m…
There has been a WMI way to get info about the Sync service, MAs and connector space objects since the MIIS days. There used to be a bunch of vbscript samples on TechNet but I’ve never seen them updated for PowerShell. The other day I wanted to produce a report of MA stats and thought…
A long time ago now I posted a basic SQL method of archiving the Requests history to another database. I’m still using this with FIM 2010 and have updated the method now to also grab info about Approvals. Note I haven’t tested this with R2.
I just had a request to do with auditing activity in the FIM Portal, and as the solution was quite neat and easy to implement I thought I’d share it. The security team need to archive information about who makes changes in AD and other applications, and now they need to be able to audit…
I have just installed the reporting for FIM R2 RCÂ and generated my first reports. Though when I say “just” read that as “spent two days on it and reinstalled twice”. However it is now working (yay! Was it worth it? Not sure yet!) and here’s my write-up. You should also refer to the following documents…