Adventures in identity management
There were a few FIM reporting sessions at TEC, none of which I managed to make it to, though I hope the presenters will be making their solutions generally available as they are undoubtably more correct and complete than what I’ve been doing. However a couple of people did ask that I post my method…
I’ve been creating lots of Sets lately. Lots and lots. I created over 400 of them and there are around 40k objects in the system. At TEC I found out that no one else seems to have created quite so many Sets so here are my observations.
I got a lot of questions about this at my TEC session where I demonstrated the work I’ve been doing to configure the FIM Portal as a front-end for BPOS administrative tasks. I don’t think I answered as well as I could have, so I’m going to lay it all out in this post: why…
I had an app-store-import-exception on Import run profiles of my FIM MA, while exports continued to work. There was an error in the event log but it was one of these great, long, confusing looking ones – however I wanted to include it to show how actually the clues are there, you just have to find…
While trying to install update 241774 I got “Error 25009: The Forefront Identity Manager Synchronization Service setup wizard cannot configure the specified database. Windows NT user or group ‘mydomain\fimsync-service-account‘ not found. Check the name again.”
Here’s a new script thet I’m pretty pleased with myself about! To make the most of the delegation flexibility in the FIM Portal, and to target your workflows correctly, you can find yourself creating a lot of Sets and MPRs. A lot. You also might find that many of them are very similar, with only…
Continuing in my recent theme of communicating information back from a custom workflow (see also Updating RequestStatusDetail and Passing Data via the Request Object), this post shows how you can write information into WorkflowData parameters to then use later in the workflow, perhaps putting it somewhere with the Function Evaluator, or using it in an Email…
Not long ago I wrote a post about writing status messages back to the Request object from a custom workflow. I used custom attributes because I was following the only documentation I could find. But Henrik said “why don’t you use RequestStatusDetail?” – and actually the reasons were a. I hadn’t thought of it, and…
I’ve just posted this script to the FIM Forum Scriptbox. It helped me do a bulk update of attributes in the FIM Portal that, for various reasons, I didn’t want to export through the Sync Service. I tried to make the script as flexible as possible, so it reads the attribute names from the header row…
I’ve finally started using SQL 2008 Reporting Services in earnest to provide access to all that useful data in the FIM Metaverse. Like a good girl I’m replicating the tables to another database, instead of pointing straight at the active FIMSynchronizationService database. Here’s a simple little script that I’ve tacked on to the end of…