Adventures in identity management
In this post I will offer general advice about migrating MIIS/ILM Sync to FIM Sync, supplementing the information in the Migration Guide on Technet. I’m looking at this purely as a Sync Service to Sync Service migration so there will be nothing about adding the FIM MA, replacing classic rules with declarative, or any of…
The FIM Sync Service allows passwords to be synchronised from a source AD account to the user’s accounts in other systems. The sync is done at the point of password change and relies on the Password Change Notification Service, which you must install on your domain controllers. Many target systems are supported OOB, but for BPOS you…
I had a problem today setting userPassword in openLDAP 3, using the openldapXMA on FIM 2010. I needed to encode the password with MD5 and it looks like there is a change with the .NET libraries running on Windows 2008 x64.
The most time critical aspect of an MIIS installation is likely to be the Password Sync. There are always going to be delays in syncs through the MAs, and people should be used to that – but when a user changes their password they are going to expect it to go straight through. If you…