Adventures in identity management
In the early stage of your ILM project, or whenever taking over some new aspect, It’s worth putting some effort in to drawing a clear picture for whoever has the job of approving your change. What I try to do is produce a spreadsheet that shows, very clearly, the adds and deletes; and in the…
This is a repost of an article which was originally about multivalue attributes in general, but with a focus on group members. I realised I had made some generalisations about multivalue attributes which actually specifically apply only to attributes like member, which contain reference DN values. So I am now re-releasing the post, with a…
Thought I’d already covered joins sufficiently in this post? Heck no, I got plenty more to say! Multiple Join Rules You can have multiple join rules, which you may (or may not) combine into Mapping Groups.
Extension code cannot run standalone, but only within ILM. To debug the code you must first attach Visual Studio to the miiserver process.
I’m now at the point, in this series of posts for ILM-newbies, where I can start to look at provisioning code.
Today I will introduce the simplest coding element in ILM – advanced attribute flows. Direct attribute flows can be done with no code, but they’re not all that interesting – all you can do is flow one value directly to another, or apply a constant value. To manipulate values, or to use the values of…
While writing this series of newbie posts I have, on a few occasions now, had to stop half-way through a post because I’ve realised that something else needs to be explained first. I’m at the point now where I can’t go any further without introducing the topic of writing code. I have spoken to several…
Joining 101 A join is a connection between a metaverse object and a connector space object. Joined CS objects are called “Connectors”, Unjoined CS objects are called “Disconnectors”. Multiple relationships are permitted in one direction: A single metaverse object can be joined to multiple CS objects, However a single CS object cannot be joined to…
Run profiles are one of the more straight-forward aspects of ILM configuration, however, like everything else, there are aspects that are not immediately obvious, and others which only become apparent through experience. MAs have no run profiles initially – you have to create them all. You can call them what you like, and they can…
And now for a closer look at the configuration of SQL MAs. The config details that are common to all MA types are covered in this post, so I won’t repeat them here. The SQL-specific options probably apply equally to the Oracle and DB2 MAs, but I’ve never used ’em myself. We’ll start on the…