Adventures in identity management
I have finally had a need to update my import/export log archiving system so it now uses powershell to convert the XML directly to HTML, without relying on IE to do the rendering, as I was before. The idea is a script you run immediately after every Import and Export run profile. It will take…
Just going into prod with a major FIM solution and we found that approvals weren’t working. The request was sent, the email arrived, but when the user went to the Portal to attempt to respond to the request they got “Unable to process your request” immediately after clicking “Submit”.
I just had a request to do with auditing activity in the FIM Portal, and as the solution was quite neat and easy to implement I thought I’d share it. The security team need to archive information about who makes changes in AD and other applications, and now they need to be able to audit…
There’s an ongoing problem with maintaining a system that has all the configuration possibilities of FIM. Documentation is usually out of date the moment it’s written and it’s a cumbersome way to try and understand a system anyway. One thing that can at least make your Policy configuration a bit easier to understand is to…
Just a quick one because I’ve gone and done this again. I created a new Search Scope, absolutely certain the usage keywords and permissions are all correct, and the thing just won’t appear, no errors, nuthin.
Following on from my recent post about Upgrading MIIS/ILM to FIM I’ve now posted the helper scripts mentioned in that post (and demo’d in my TEC session) on the brand new FIM Team Community site. We’ll be putting various goodies on this site that we want to make publicly available and the other thing you’ll find…
In this post I will offer general advice about migrating MIIS/ILM Sync to FIM Sync, supplementing the information in the Migration Guide on Technet. I’m looking at this purely as a Sync Service to Sync Service migration so there will be nothing about adding the FIM MA, replacing classic rules with declarative, or any of…
Some of my memorable moments from TEC this year…
I was stuck in one of those loops where you’re trying to track down an error in a RCDC by commenting out sections of the configuration file, uploading, recycling app pool, refreshing your browser, testing, go back to the beginning… I thought “there’s got to be a better way!” – and, as is so often the…
In my current project I’ve created around 40 Workflows and over 80 MPRs – and this is just phase one! In an effort to keep things tidy I’ve been using naming conventions and a consistent design approach, and one thing I found myself doing was separating MPRs that grant permissions from MPRs that run Workflows.