Comments on: ILM2 RC0 – Codeless Provisioning Step by Step

By: Carol

Carol — Thu, 29 Oct 2009 08:55:38 +0000

You can use only codeless sync rules, as long as you don’t want to do anything too complicated. I have a couple of import flows which I know I won’t be able to convert to codeless: one of them substitutes non-ascii characters (eg., swapping è for e) and the other one reformats telephone numbers.

By: busbar

busbar — Thu, 29 Oct 2009 07:12:38 +0000

Hi Carol,
Thanks for your reply, Have been talking here http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/7b7decc2-eb5b-40f6-b4a2-0856be1ba9a9 about it since I was totally confused about Sync and MA rules.

you will find in my last post that you can use the FIMscript box to identify the attribute flow precednence but as I said is my findings correct or not this is the question, I think yes.

back to the topic, Can I use the sync rules only and get rid of the MA flows, have you tried that?
Mahmoud

By: Carol

Carol — Wed, 28 Oct 2009 11:10:07 +0000

Hi busbar,
this topic is going to confuse a LOT of people. Basically we can use both the new sync rules and the old style MA rules at the same time. I am not entirely clear myself on which gets precedence. Also, to add to the complications, inbound sync rules work differently to outbound. The inbound rules just work. For the outbound rules you need to do all the mucking around with workflows and MPRs, and then deal with the additional ERE and DRE objects.

My general feeling on all of this at the moment is that I will stick to MA rules. Unfortunately if I want to get objects into the FIM portal I have to use one of the new style inbound sync rules and tick the “Create in FIM” option. So whichever way I look at it there will probably be a need to use both types, at the same time, and risk a confusing mess.

By: busbar

busbar — Wed, 28 Oct 2009 08:46:23 +0000

Hi Carol,
I am confused between attribute flow in the MA configuration and sync rules in the FIM portal what is the different between them and which one is processed first and how it affects the other one.

Can you explain it to me little more.

By: aditya_khasnis

aditya_khasnis — Mon, 16 Mar 2009 10:44:18 +0000

Hi Carol,

I am using Windows 2008, so it doesn’t seem to be an issue with XP.

I didn’t put anything on connect because I messed up the setup and haven’t got a chance to get it working.

Cheers,
Adi

By: Carol

Carol — Fri, 13 Mar 2009 18:37:55 +0000

Hi Greig,

the correct ILM 2 approach to this type of problem would be to write a workflow action – either as part of your “Generate Account Name” action, or as a seperate “Confirm Uniqueness” action you can slot in.

But don’t ask me how to do this just yet! More information is a coming on how to write workflow actions, but at the moment it’s a bit sketchy – there is some info in the SDK which you can get from Microsoft Connect, or see the Ensynch guys for their published examples – Brad Turner and Joe Zamora.

But it’s all a bit beyond me at them moment so my cheat has been to use a SQL table and MA to generate values – see http://www.wapshere.com/missmiis/?p=367. You could use SQL triggers instead of export flow rule to check for uniqueness and use some kind of if-then-else sequence to generate a satisfactory value.

I also have another post somewhere on this blog where I use one of the old-fashioned type of Advanced import flow rules to query the metaverse when checking for uniqueness.

So there’s three possibilities but no easy answer – confused yet?

By: Greig

Greig — Fri, 13 Mar 2009 10:38:59 +0000

Hi Carol, excellent blog btw, I’m keenly reading this as I’m in a similar situation as yourself except I have no experience with any previous versions of ILM/MIIS unfortunately.

One thing that occured to me that you might have a quick answer too is in regard to login names when provisioning Active Directory accounts. These are normally some kind of concatination of first name and last name in one way or another but my question is how do you get ILM to check that this is unique and doesn’t already exist?

By: Carol

Carol — Tue, 10 Mar 2009 09:27:29 +0000

Looks to me like there’s a problem on XP. I’ve got the approve buttons greyed out on XP, just like you, but it’s working on Windows 2008.

By: aditya_khasnis

aditya_khasnis — Mon, 09 Mar 2009 05:13:26 +0000

Thanks for quick response Carol.

I haven’t asked this on connect newsgroup. I will do it now.

By: Carol

Carol — Sat, 07 Mar 2009 10:16:06 +0000

Hi Adi – thanks for your nice comment.

I’m afraid you’re ahead of me – I’m planning on working through such a scenario myself, but at the moment I’m approving in the portal as I still don’t have the emails working. Have you asked on the connect newsgroup?