Adventures in identity management
As I’ve mentioned before, I don’t think there’s a lot of value in keeping days of Run History. Far more useful are the Import and Export logs that you should be dumping from your Run Profiles. Using these files you can track exactly what went in and out, and more importantly, when it happened. This…
Continuing on from this post, let’s say you’ve got a DTS package that is successfully creating Delta tables. You will now want to combine this with your MIIS Delta Import job. Simple Scheduling If your system is not particularly time critical you may be able to get away with very basic scheduling. SQL allows you…
OK now it’s time to get into the scheduling script I wrote for MIIS. At some point I’d like to have a go at rewriting this as a .NET service (addendum: this is now done, see here), but VBScript was where I started, mostly because of the examples in the Developer’s Reference. I’m not going…
Scheduling is a big issue in MIIS and, when new to it, it seems rather odd that there is no native scheduling within the basic application. I expect most people quickly find out about MASequencer from the MIIS Resource Toolkit, and this isn’t a bad starting point. With MASequencer you can create series of MIIS…
I expect that learning to keep the Run History under control is something that most MIIS designers have learnt through unpleasant experience. But in case you haven’t, a brief overview. The Run History is stored in the MicrosoftIdentityIntegrationServer database, and contributes massively to the growth the database. If you don’t regularly delete the Run History,…
When planning delta imports from SQL, thought needs to be given to clearing down the delta tables. If you have any type of code running in response to the imported data then you have to accept that import errors will occur, some of them not even your fault! What should happen to the rows in…
Here’s another trick that is really very simple, but, for reasons I can’t figure out, difficult to find out about. Despite what the documentation seems to say (and despite what I have read MS employees categorically stating), you CAN add an Exchange mailbox to an account that already exists in AD. Bundled with MIIS are…
I’ve already covered how to create a multivalue table for SQL MAs; and I’ve also talked about generating Delta tables for single-valued attributes. If you are doing multivalue imports from SQL you are really going to want to get Delta imports working there too – those babies can be sllloooowww. We need two tables for multivalue…
MIIS gives you the option of specifying individual attributes to include in your delta import. Presumably you could use this to specify which single-valued attribute to import (perhaps the Surname has changed, but nothing else has), but I’d be surprised if you got much of a performance improvement compared to just re-importing the whole row….
Here’s a quick walkthrough of creating an XMA. It’s by no means complete or authoritative, and just shows a method I’ve found success with. The example is creating Netware home directories, something I recognize most people don’t need to do these days, but it’s a flexible method which I have used for other scenarios as…