Adventures in identity management
I’ve finally started using SQL 2008 Reporting Services in earnest to provide access to all that useful data in the FIM Metaverse. Like a good girl I’m replicating the tables to another database, instead of pointing straight at the active FIMSynchronizationService database. Here’s a simple little script that I’ve tacked on to the end of…
It’s actually pretty easy to query SQL 2008 from powershell. This simple little script reads employeeID numbers from a text file and then queries the metaverse for selected attributes. The text file must have “id” as the first row, with the id numbers then listed one per line.
Why oh why does MIIS have such an insatiable appetite for transaction log space? I’m afraid I can’t answer this, but I can share a few tips.
I use a lot of SQL MAs. While ILM/MIIS is great at syncing data between directories, it really isn’t that great at calculating and comparing. As much as possible I like to do the data manipulation in SQL, and then keep ILM to what it’s best at – joins and syncs. After exporting data to…
Thanks to Joe Stepongzi for pointing this one out to me: you can flow a metaverse string attribute direct to a connector space relational DN attribute, as long as the metaverse string holds a valid DN.
Function RunProfile – run a MA run profile Sub ArchiveLog – copy import and export logs to a timestamped version, while modifying them to work with a XML stylesheet Function ExportsPending – check if the MA has pending exports Function DeltaImportsPending – check if a Delta table has any lines to import Function RunSSIS – call a SQL 2005…
ILM works on a single object at a time, so it can be a little tricky if you want to make a decision based on other objects in your metaverse. It is, however, perfectly possible (though, I believe, officially discouraged) to run SQL queries against the metaverse table from your extension code.
This is a repost of an article which was originally about multivalue attributes in general, but with a focus on group members. I realised I had made some generalisations about multivalue attributes which actually specifically apply only to attributes like member, which contain reference DN values. So I am now re-releasing the post, with a…
And now for a closer look at the configuration of SQL MAs. The config details that are common to all MA types are covered in this post, so I won’t repeat them here. The SQL-specific options probably apply equally to the Oracle and DB2 MAs, but I’ve never used ’em myself. We’ll start on the…
Here’s a really, really useful trick. You can copy the MicrosoftIdentityIntegrationServer database to another server, run miisactivate, and, within no time at all, have an exact replica of your live server. Let me just spell this out – not only will you have all your MAs, your Metaverse fully populated, and your Connector Spaces fully populated;…