Skip to content

FIM Walkthroughs – Create the FIM MA

Note: this post was written for the RTM version of FIM 2010.
After installing FIM, you will need to start configuring the Sync Service so that you can start to get data into and out of the Portal This post shows you how to configure the FIM Management Agent.
When you first run the Synchronization Service you will see pretty much exactly the same thing that users of ILM 2007 and MIIS 2003 will be very familiar with. In fact, to learn about this interface the ILM and MIIS documentation will still be accurate.
One of your first tasks here is to create the FIM Management Agent.On the Management Agent tab click Create and then select the “FIM Service Management Agent” type from the dropdown.
This was pretty easy for me because everything was on the localhost. Otherwise the “Server” is the SQL server name, and the “FIM Service base address” should reference the sharepoint server.The service account is a regular domain account with no special permissions.
I’m planning on managing users so I also select the “Person” object type here. You can come back to this screen any time later to select other object types, including new ones you create in the Portal.
By default all attributes are selected so there’s nothing to do here. Again, you will revisit this page later if you need to synchronize new attributes that you’ve added to the Portal schema.
Here you can block certain objects from being synchronized by the Sync Service. In this example I am blocking the two built-in Portal accounts.
On this page you map the Portal object type to an object type in the Metaverse. See the Metaverse Designer tab in the Sync Service GUI for the configuration of the metaverse schema.
Initially just accept the default attribute flows here. You will be back to this page before long, selecting the attributes you want to appear in the Portal.
Accept the default for now.
Again there should be nothing to configure on this page – just click Finish.
The MA is now created. Your final step is to create Run Profiles, which will actually make the MA do something.My typical list is pictured here – Import, Sync, Full Import and Full Sync, Delta Import and Delta Sync, and Export. Note I also have “Export 1″ which is a restricted export that is useful while testing.

For more info about Run Profiles see this post.

What next? We need to get some data into the system – and my next post will cover importing HR data into the Portal.

Update 15/06/2011

Recently I had some trouble modifying the FIM MA on version 4.0.3573.2. The error was “Failed to connect to the specified database with the given credentials”. For some reason it was trying to connect to the FIMService database using the Sync service account instead of the FIM MA service account. We gave the Sync service account db_owner rights to the FIMService database and the problem went away.

I also had some problems trying to use a remote portal address in place of localhost. The error was “Failed to retrieve the schema. Failed to connect to the specified database or Forefront Identity Management Service. Please check the specified database location, service host address, and acount information.” This turned out to be due to proxy settings. We had to login to the server using the FIM Sync account (again FIM Sync, not FIM MA) and disable the proxy in IE.

{ 4 } Comments

  1. Ross Currie | March 29, 2011 at 1:03 pm | Permalink

    Heads up Carol, your Attribute Flow and Object Type Mapping pages are reversed in the above instructions

  2. Carol | March 29, 2011 at 1:38 pm | Permalink

    So they were – thanks.

  3. shahrokh | November 19, 2011 at 7:55 am | Permalink

    Hi ,
    thanks about your article ,but I still receive this error “Failed to connect to the specified database with the given credentials” ,if u please take some screen shot on where u add permission on SQL server or bright some how u know.
    thank u ;)

  4. Carol | November 19, 2011 at 8:27 pm | Permalink

    So you haven’t given the rights yet? Go into SQL Server Manager, find the FIMService database, under it you will see Users, add the FIM Sync service account there and give it the database roles FIM_Service_Write and FIM_SynchronizationService roles. If the account doesn’t already exist on that SQL server as login you will first need to add it under Security/Logins, but if the Sync Service database is on the same server then the account should already be there.

Tamoxifen for sale Furosemide 40 mg without prescription Cytotec no prescription to buy buy Requip 2mg order Seroquel online canada buy Clomiphene australia buy Seroquel generic order no prescription Metformin online Requip buy Seroquel purchase overnight delivery Seroquel no prescription needed 50mg buy seroquel online without prescription from canada no prescription generic seroquel seroquel for sale canadian pharmacy no prescription seroquel buy seroquel online uk buy seroquel 25 mg seroquel online 50mg how to buy seroquel online seroquel online uk seroquel 50mg canada buy generic seroquel seroquel no script seroquel online without a prescription can you buy seroquel online buy seroquel usa buy seroquel in canada Prednisone on line buy Prednisone overnight buy cheap Prednisone online free consult buy Prednisone on line amex uk buy Prednisone buy cod Prednisone order overnight Prednisone medikament Prednisone Prednisone order online buy Prednisone no scams buy Prednisone mastercard online purchase Prednisone buy cheap Prednisone no prescription buy Prednisone amex online without rx buy Prednisone canada purchasing Prednisone without a script where to buy generic Prednisone online without a prescription Prednisone drug non rx cheap Prednisone order Prednisone cheap overnight fedex Prednisone overnight without a prescription buy Prednisone 20 mg buy Prednisone where Prednisone without prescription overnight shipping purchasing Prednisone without a script Prednisone without rx overnight shipping where to purchase Prednisone no prescription no fees Prednisone online overnight delivery cod Prednisone prescription order order Prednisone without rx from us pharmacy buy Prednisone pills in toronto buy Prednisone online online pharmacies Prednisone buy Prednisone no prescriptions buy Prednisone once a day order Prednisone pay pal online without rx buy Prednisone where buy line Prednisone best finpecia online pill buy Maxalt us pharmacy Maxalt buy Maxalt with visa Cytotec purchase overnight delivery where buy Lisinopril purchasing finpecia with overnight delivery no prescription requip buy requip over the counter where can i order requip online how to get arimidex arimidex cheap online buy Requip online australia generic requip no prescription arimidex ordering requip no rx in us requip buying requip online without prescription Requip express online i need to order Requip without a prescription buy Requip from the uk purchase Arimidex order requip without rx arimidex online order where can i buy arimidex without prescriptions buy arimidex generic requip for sale without prescription buy generic arimidex buy requip no prescription needed order requip online overnight shipping cheap generic arimidex no prescription requip buy online no prescription Lisinopril overnight cod cheap order rx metformin prednisone 40 mg cheapest place to buy Metformin purchase Metformin online Maxalt no prescription needed 10mg Maxalt 10mg canada where to buy Maxalt uk buy generic Maxalt canada buy metformin cod discount Cytotec order Cytotec uk purchase Cytotec online no membership overnight shipping best Cytotec online pill Valacyclovir Cytotec want to buy Cytotec in usa Cytotec online overnight delivery cod buy cytotec with a mastercard order Cytotec no rx how to order Cytotec online without a rx how to buy Metformin without a prescription Metformin price buy Alli without prescription