Adventures in identity management
I’ve had a head scratcher in the last week. A Dev environment, everything thought to be working perfectly according to the tests we’d done so far, which had just involved a few identities at a time. But then we tried to do some bulk tests, registering 300 people at once, and things did not go…
I was asked to evaluate the impact of ticking “Allow Nulls” on the AD export flow for ‘manager’ when it was realised that some people had a manager set in AD, while in FIM they had none. This can be a hard change to test in Dev or Test environments which don’t have the full…
Another great User Group session this morning, all about automated documentation for FIM Portal policy. The links to watch the recording and/or download the scripts are on this page here: https://unifysolutions.jira.com/wiki/display/FIMTEAMCOM/2014-02-19+-+Auto-document+your+FIM+Portal+Solution
A long time after writing an earlier blog post on this error, I’ve seen it again. You try to approve in the Portal, and right after clicking Submit you get the dreaded FIM “Unable to process” error page
A long time ago I shared a script that duplicates a FIM Portal object. At the time a couple of people asked if it would duplicate a Sync Rule, which it didn’t. After having avoided Sync Rules as long as possible I’m now working on a site where they were already implemented and I’m extending…
I’ve just installed FIM R2 reporting in an environment that had an existing System Center Data Warehouse infrastructure based on SC 2012 R2 and SQL 2012. I had a couple of problems along the way so here are the troubleshooting notes.
I’ve been struggling lately with poor SQL performance in a Test environment and I’m pretty sure that has been causing an intermittent problem with objects not transitioning in to Sets and Groups straight away. They all get sorted out when the FIMTemporalEvents job runs overnight – but that’s not very comforting to the testers who…
I’ve been confusing myself no end with temporal set rules and I’ve finally figured out it’s because I thought “today” meant what it sounds like – whereas in fact it means “now”.
Some FIM really REALLY annoys me, mostly when I come up against odd and unexpected limitations, but then I write a quick little PowerShell script to fix something or other and remember that this is really one of the best differentiators of the product. This quick fix came about because I realised that the group…
I noticed that I couldn’t use a particular attribute in search or set filters. While this can be caused by filter validation I always disable those MPRs (“General workflow: Filter attribute validation for administrator” and “General workflow: Filter attribute validation for non-administrators”) so that never causes me a problem. In this case it turned out…