Adventures in identity management
I recently had a lot of attributes to add to the FIM Portal. In an effort to meet a demonstration deadline I broke the normal rules of play and added them simultaneously to the Dev and Prod Portals. I still don’t understand why, but the next day when I came back both portals were broken. I…
At one of my customers we’ve started provisioning all new users directly to Exchange 2010, while the old users are being progressively migrated from Exchange 2007. I modified the provisioning code for Exchange 2010 (basically just adding the msExchHomeServerName attribute as explained in this doc) and new users and mailboxes were created just fine. What…
I have been writing an activity that resets forgotten BPOS passwords (more on that later) and I wanted to include a Notification activity that would inform the user about the password reset request. To make the notification useful I want to include whether the reset succeeded, and if it failed, what the reason was. To…
Following on from the last post about adding a CheckBox, here’s how I added a RadioButtonList to a custom workflow UI. Note: I have also uploaded a version of this to the Technet Wiki: How to Add a RadioButtonList to a FIM Custom Workflow UI
The only examples of custom workflows I’ve seen so far use text boxes for all data entry on the UI. Here’s how I went about adding a check box to my UI. Note: I have also posted a version of this to the Technet Wiki: How to Add a CheckBox to a FIM Custom Workflow…
The FIM Sync Service allows passwords to be synchronised from a source AD account to the user’s accounts in other systems. The sync is done at the point of password change and relies on the Password Change Notification Service, which you must install on your domain controllers. Many target systems are supported OOB, but for BPOS you…
This year I have been working on a large BPOS project, with 17000 mailboxes being migrated from a variety of source mail systems. As is currently obligatory for such an installation, we use DirSync to synchronise users, groups and contacts from a source AD to BPOS. So while I don’t need my own BPOS MA…
I was entertained by this comment in Jackson’s summary post about Neil MacDonald’s session at the Gartner Summit : Gartner’s position is that FIM 2010 is not a complete solution. It can be extended, and by 3rd party partners like Quest but it’s like going to the unfinished furniture store. It’s not a bad analogy –…
This post is going to describe an approach I’ve used a couple of times this year, in situations which looked quite different at the outset, but actually had one particular characteristic in common: the source data contained multiple records relating to individual people, and I needed access to all of them. One case involves “contract”…
Just a quick note on this as it’s something that wasn’t immediately obvious to me. I was using the Metaverse GUID as an anchor for provisioning to a simple SQL MA like so: csentry(“mvguid”).StringValue = mventry.ObjectID.ToString However when I tried to do a direct join rule on csentry:mvguid = mventry:<object-id> I got the error cannot-parse-object-id. In…