Adventures in identity management
I’ve just posted an updated version of my PendingExports.ps1 script here. The script parses the pending exports XML file produced by csexport.exe and produces single- and multi-value CSV files that you can import into Excel (split on the semi-colon). I’ve been tinkering with this script for years. This one now includes all current attribute values…
I was trying to delete a CSV MA from a MIM sync service. The connector space was empty but all I got was the error “Unable to delete the management agent” and the code 0x8023060c. Nothing in the event logs at all. I was convinced it was something to do with the database and rolled…
This week I battled with an error from the OOB SQL MA for MIM 2016 (which I don’t think has changed at all from FIM 2010, and probably not earlier versions as well). The MA was working with a SQL database table on a server in another, non-trusting AD forest, and using Windows authentication. The…
I presented this at the MIM Team User Group meeting last week, but was having some computer issues and apparently people couldn’t hear me. There did seem to be quite a bit of interest from the comments window, so I figured I’d write it up as a blog post. This solution allows an Office 365…
I’ve had various stabs over the years at tools that will dump out the whole connector space, or just the pending exports, and convert it into a CSV file for easy analysis. They often fall down on two things: the XML file produced by CSExport can be very large (way too big for Get-Content), and…
I’ve shared the new version of the documentation scripts here: https://unifysolutions.jira.com/wiki/display/FIMTEAMCOM/Automatic+Word+Documentation The best new feature is in Document_SyncConfig.ps1 which now includes an end-to-end attribute flow map based around Metaverse object/attribute – so showing all IAFs and EAFs going via each Metaverse attribute.
I’ve just been troubleshooting sporadic export errors through the FIM MA in a Test environment. The export would fail a couple of times in a row with a failed-modification-via-web-services or failed-creation-via-web-services and the detailed error said something about “AttributeNameViolatesSchema”. Eventually the export would succeed all on its own, without anything else changing.
Listening to Andy van den Biggelaar’s FIM Team User Group session on Reporting this week reminded me that I haven’t shared the latest versions of my Requests and Approvals archiving scripts, and I also haven’t shared the scripts I now use to log Sync runs and convert import and export log files to CSV, ready for…
I’ve uploaded a Sync Service auto-documentation script to the FIM Team Scripts site, to go with the Portal one I shared a couple of months back. You can get them both here:Â https://unifysolutions.jira.com/wiki/display/FIMTEAMCOM/Automatic+Word+Documentation
I was asked to evaluate the impact of ticking “Allow Nulls” on the AD export flow for ‘manager’ when it was realised that some people had a manager set in AD, while in FIM they had none. This can be a hard change to test in Dev or Test environments which don’t have the full…