Adventures in identity management
I’ve shared the new version of the documentation scripts here: https://unifysolutions.jira.com/wiki/display/FIMTEAMCOM/Automatic+Word+Documentation The best new feature is in Document_SyncConfig.ps1 which now includes an end-to-end attribute flow map based around Metaverse object/attribute – so showing all IAFs and EAFs going via each Metaverse attribute.
Listening to Andy van den Biggelaar’s FIM Team User Group session on Reporting this week reminded me that I haven’t shared the latest versions of my Requests and Approvals archiving scripts, and I also haven’t shared the scripts I now use to log Sync runs and convert import and export log files to CSV, ready for…
I’ve uploaded a Sync Service auto-documentation script to the FIM Team Scripts site, to go with the Portal one I shared a couple of months back. You can get them both here:Â https://unifysolutions.jira.com/wiki/display/FIMTEAMCOM/Automatic+Word+Documentation
I was asked to evaluate the impact of ticking “Allow Nulls” on the AD export flow for ‘manager’ when it was realised that some people had a manager set in AD, while in FIM they had none. This can be a hard change to test in Dev or Test environments which don’t have the full…
A long time ago I shared a script that duplicates a FIM Portal object. At the time a couple of people asked if it would duplicate a Sync Rule, which it didn’t. After having avoided Sync Rules as long as possible I’m now working on a site where they were already implemented and I’m extending…
Some FIM really REALLY annoys me, mostly when I come up against odd and unexpected limitations, but then I write a quick little PowerShell script to fix something or other and remember that this is really one of the best differentiators of the product. This quick fix came about because I realised that the group…
A few people asked for the code in the session today. It’s all pretty simple but I’ll included it here with a summary of the demos. You can watch the session here: http://channel9.msdn.com/Events/TechEd/Australia/2013/ATC421
I’ve been working a lot on config migrations lately – specifically migrating FIM configuration from dev to test to prod. I wanted to be able to easily compare two Sync Service configurations: before a migration to see what the differences are; after a migration to confirm that the servers are now the same; as a…
Lately I’ve been doing lots of work with logging various FIM-related data to SQL tables and presenting them with SQL Reporting Services (SSRS). I’ve been having some good fun with SSRS – there seems to be a lot you can do with just a basic understanding of queries and parameters – and I’m sure I’m…
I’ve been thinking a lot lately about maintaining data quality in the FIM Portal. When you’re working with a lot of referenced objects (and it really is the best way to go in the Portal) you find yourself copying string data around a lot. So, for example, a person selects a business unit object from…