Adventures in identity management
I worked with the FIMWAL in the past on a couple of MCS engagments, but hadn’t yet had the opportunity to use the open-sourced MIMWAL on an engagment. I have, however, just been converting something I’ve done before to all-MIMWAL workflows, in preparation for re-using the concepts on a new project. This is a pretty…
I’ve been struggling lately with poor SQL performance in a Test environment and I’m pretty sure that has been causing an intermittent problem with objects not transitioning in to Sets and Groups straight away. They all get sorted out when the FIMTemporalEvents job runs overnight – but that’s not very comforting to the testers who…
A few people asked for the code in the session today. It’s all pretty simple but I’ll included it here with a summary of the demos. You can watch the session here: http://channel9.msdn.com/Events/TechEd/Australia/2013/ATC421
Obscure error message of the day: A few workflows were failing in the Test environment and this event appeared in the FIM log. There may be many reasons for this error, it’s a pretty general one, but in my case it’s because I generated these workflow from template XOML copied from another workflow – but…
Putting this here to give me a chance of remembering next time I do this – because I will. I was trying to recompile my custom workflow library and I got the error “Unable to load one or more of the requested types. Retrieve the LoaderExceptions property for more information.” Eventually I remembered that I’d…
I was asked today to implement notification emails on changes to certain groups. Like many situations with the FIM Portal this turned out to be trickier than expected. A number of the groups are criteria-based so don’t actually have a member attribute as such. With no member-update request happening there’s nothing to actually trigger a…
I have just spent a very frustrating day trying to figure out how to get access to the resource found by the EnumerateResourcesActivity, not helped even slightly by the usual machine-generated “documentation“. I’m still not very happy with it, and can’t for the life of me understand why it can’t give me a straight object collection…
R2 introduced a new property to the UpdateResourceActivity, CreateResourceActivity and DeleteResourceActivity classes called “ApplyAuthorizationPolicyProperty”. Setting this to “true” in your custom activity allows an Authorization activity to be triggered by an Action workflow. I have finally had an opportunity to try this out.
I needed to delete all the Managers from people in the FIM Portal where a particular Manager was set. I had blithely assumed this would be easy with the FIM PowerShell plugin – sadly, not so.
I’ve been trying to pass an ObjectID to the Approval activity via a WorkflowData parameter generated in the FIM PowerShell Activity but I had quite a bit of trouble getting the format right.