Adventures in identity management
I just put together a workflow prototype for a project: when the membership of certain Criteria-based groups changes the groups’ Owners should be notified. This gave me an opportunity to use the EmailNotificationActivity inside a custom Workflow for the first time. As usual I found the official documentation to be somewhat … thin.
The other day I was helping a colleague with a workflow that wasn’t working. He had a number of “Set Transition” MPRs that were behaving as expected – except for one. Eventually the penny dropped – it was because the transition set was based on a datetime attribute – a “Temporal Set”.
The account you use to install the FIM Portal becomes its built-in administrator account. I believe this account should be treated with extra care, so here are a few of my personal best practices. Please do comment and add your own tips if you have a different perspective to share.
We’ve all found that the Function Evaluator is frustratingly limited, and the only random function is for a number – so how can you generate a random password? You can write your own activity, or use Tools4FIM, but I’ve been trying to use the OOB activities as much as possible so here’s what I ended…
I wanted to follow up the BPOS Powershell Activity with an explanation of why I’m running some of the powershell actions in the Authorization phase.
Here’s something I’ve been promising to post for a while – my BPOS Powershell Activity.
I got a lot of questions about this at my TEC session where I demonstrated the work I’ve been doing to configure the FIM Portal as a front-end for BPOS administrative tasks. I don’t think I answered as well as I could have, so I’m going to lay it all out in this post: why…
Continuing in my recent theme of communicating information back from a custom workflow (see also Updating RequestStatusDetail and Passing Data via the Request Object), this post shows how you can write information into WorkflowData parameters to then use later in the workflow, perhaps putting it somewhere with the Function Evaluator, or using it in an Email…
Not long ago I wrote a post about writing status messages back to the Request object from a custom workflow. I used custom attributes because I was following the only documentation I could find. But Henrik said “why don’t you use RequestStatusDetail?” – and actually the reasons were a. I hadn’t thought of it, and…
I have been writing an activity that resets forgotten BPOS passwords (more on that later) and I wanted to include a Notification activity that would inform the user about the password reset request. To make the notification useful I want to include whether the reset succeeded, and if it failed, what the reason was. To…