missmiis : Adventures in identity management

TEC 2012 – I’m speaking!

Once again I’ll be off to TEC US this year, though this time travelling from Australia, and this time in the company of my collegue Bob Bradley.

I’m presenting a session on MIIS/ILM migration to FIM. Not the sexiest topic I admit, but certainly one with the potential to be far knottier than you may have bargained for.

Then Bob and I will be presenting our revolutionary “Replay MA”. Based on a brilliantly simple idea of Bob’s, this concept overcomes some of the restrictions of the FIM MA without breaking any rules or doing anything unsupported.

Bob will also present a second session on keeping data in the Portal ship shape, with his whimsically titled FIM Fairy.

Should be a great conference as ever! If you’ve never been and can get yourself to San Diego the first week in May then sign up here.

2012 02 19 Carol Conferences Comments (0) Permalink

Introducing the FIM Team Mentor Program

Today I’m please to announce a new initiative by the FIM Team: the FIM Team Mentor Program.

Learning FIM is hard, and working out how best to apply it to the requirements and constraints of your environment is even harder. But maybe you don’t want, or don’t have the budget, to get consultants to come in and do it all for you. Perhaps you’ve done some training but you’re still getting stuck – really what you need is someone to talk ideas over with, to get some pointers from, to learn from their real-world experiences of what works and what doesn’t.

By signing up to this program you will be assigned your own personal mentor from the experienced consultants in the FIM Team who will be able to assist you via email or phone/web conference.

For more information and for contact details please see http://thefimteam.com/fim-team-mentor-program/.

2012 02 07 Carol FIM 2010
Unify Comments Off Permalink

RCDC Variables, and using them to scope a ListView or IdentityPicker

I don’t know how many times I’ve used the RCDC documentation, but somehow never noticed the bit on Environment Variables. Today however I was looking for a way to restrict the scope of a UocListView or UocIdentityPicker based on properties of the user being edited – and it turns out that you can reference any properties of the object using %Attribute_AttributeName%, then use it in a filter!

2012 02 03 Carol FIM 2010 R2
RCDC Comments (2) Permalink

Authorization after an Action

Something that has come up from time to time on the FIM forum is the need to trigger an AuthZ workflow based on some change made by an Action workflow (or by the Sync Service). This is not possible in the FIM Service today and I don’t see any evidence that it will be possible in the future either – I guess it must mess up the workflow processing on some fundamental level.

The gereral consensus on the forum has been that you need to start a new request from outside the Portal – perhaps by using a powershell script. This new request can then follow the full AuthN -> AuthZ -> Action progression. But how to trigger it?

I have now worked through this idea and it’s working, though did need quite a few policy objects in the Portal as well as the script.

2012 01 16 Carol FIM 2010
FIM 2010 R2
MPR
powershell
Sets
Workflow Comments (4) Permalink

Installing Reporting for FIM R2 RC

I have just installed the reporting for FIM R2 RC and generated my first reports. Though when I say “just” read that as “spent two days on it and reinstalled twice”. However it is now working (yay! Was it worth it? Not sure yet!) and here’s my write-up.

You should also refer to the following documents from the FIM R2 media:

Test Lab Guide: Demonstrating Forefront Identity Manager 2010 R2 Beta Reporting
Test Lab Guide: Installing Forefront Identity Manager 2010 R2 Release Candidate

2012 01 08 Carol FIM 2010 R2
Reporting Comments (5) Permalink

Powershell script to generate test users in AD

I needed to set up a test AD with realistic looking test users. This script by Alex Tcherniakhovski was the type of thing I wanted as it starts with lists of OUs, first names and last names and then creates accounts across all OUs listed, and using a random selection of names.

However Alex’s script uses Excel which I don’t have installed in my lab and don’t really want. So I’ve taken his source lists and his concept and written a little powershell script to do much the same thing.

You can download it from here.

2012 01 03 Carol AD
powershell Comments (0) Permalink

Annual blag post

I’ve received word that I have been awarded the MVP for 2012. I never take this for granted and it always makes me very happy to receive this acknowledgement, so thank you Microsoft and the FIM PG!

2012 01 02 Carol Uncategorized Comments (2) Permalink

Outbound Sync Rule Scope

Just getting started with FIM R2 RC here at the moment – and the first thing I’m excited about is outbound Sync Rule scopes!

2011 11 28 Carol FIM 2010
FIM 2010 R2 Comments (6) Permalink

Don’t use the FIM configuration migration scripts between versions

I’ve just been installing FIM R2 RC into my lab. Unfortunately I couldn’t get the portal to upgrade from R2 beta to R2 RC (and to be fair the doco doesn’t say you should be able to) so had the bright idea of using the migration scripts to do a config comparison between my beta and RC environments, and hopefully update the RC lab with my beta lab modifications.

I guess this shows I haven’t used the migration scripts all that much, because I didn’t realise they would start deleting all the new schema attributes to do with reporting!

So now I know: don’t use the FIM migration scripts between versions.

2011 11 27 Carol FIM 2010
powershell
Scripting Comments (3) Permalink

Microsoft.IdentityManagement.SolutionPackUtility.exe crashing FIM

Had a weird problem on a dev box. Whenever I launched Synchronization Service Manager, and sometimes even just when opening the properties of a MA, everything would stop while the server seemingly tried to install something in the background. Running taskmgr.exe revealed Microsoft.IdentityManagement.SolutionPackUtility.exe and TrustedInstaller.exe were running.

2011 11 20 Carol FIM 2010 Comments (0) Permalink

missmiis

TEC 2012 – I’m speaking!

Introducing the FIM Team Mentor Program

RCDC Variables, and using them to scope a ListView or IdentityPicker

Authorization after an Action

Installing Reporting for FIM R2 RC

Powershell script to generate test users in AD

Annual blag post

Outbound Sync Rule Scope

Don’t use the FIM configuration migration scripts between versions

Microsoft.IdentityManagement.SolutionPackUtility.exe crashing FIM

About this blog

Copyright Notice

My social media policy

RSS

Popular Posts

Pages

Archives

Blogroll