Quantcast
Channel: Forum Microsoft Identity Manager
Viewing all 4767 articles
Browse latest View live

Coding in FIM Portal

0
0

All,

I have been custom coding via rule extension in FIM Synch server now want to learn coding in FIM Portal.

So far I have managed coding via custom expression in FIM Portal.

How we do code in FIM Portal. While searching I have seen option via custom workflow activity.

Kindly guide me now in right direction regarding ways, capabilities and links please.

Thanks,

Mann


Changing template file for file based MA

0
0

All,

We have one file based MA but now we need to change the input file.

In new file we will be having some extra field and some new old fields will be called by new name like EMPNO instead of employeenumber.

As I am guessing It can be done via refreshing the schema and reconfiguring the run profiles although I have to try it in DEV.

Any ideas please

Thanks,

Mann

Custom Workflow Activity

0
0

Hi,

I have a custom activity where I receive the name and value of changed attributes via currentRequest requestType.ParseParameters.

It happens that I need to read other attributes of that person that didn´t change. specially one that is the person's key (Anchor)

How can I do that (preferably without a xpath expression)?

Thanks,

DD

ParseParameters

Reference Attribute to String

0
0

So I am trying to take a reference attribute "Assistant" and convert it to a String to populate msexchAssistantName.

I thought I might be able to do it with an outbound sync rule in the FIM Portal, but I cannot seem to get the custom expression right. "Assistant".Value.ToString

I found alot of String to Reference docs online but not Reference to String.

any help is appreciated.

Thanks

Russ


Russell Lema

It's time for the TechNet Wiki FIM "Great Guru Love-in"! You too can get some loving!

0
0

February at TechNet Wiki usually involves a lot of love...

 

We love to read.

We love to learn.

We love our gurus, for they love to give.

 

Computer Geek Love Story Stock Photos

 

We love to make friends and promote great content.

We love to meet the community, and get closer to you.

  

 

We love to interview our winners, and bestow much love and honor upon them.

We love to tell the world of your achievements, and we promote those most active to inner circles!

All you have to do is add an article to TechNet Wiki from your own specialist field. Something that fits into one of the categories listed on the submissions page. Copy in your own blog posts, a forum solution, a white paper, or just something you had to solve for your own day's work today.

Drop us some nifty knowledge, or superb snippets, and become MICROSOFT TECHNOLOGY GURU OF THE MONTH!

This is an official Microsoft TechNet recognition, where people such as yourselves can truly get noticed!

HOW TO WIN

1) Please copy over your Microsoft technical solutions and revelations toTechNet Wiki.

2) Add a link to it on THIS WIKI COMPETITION PAGE (so we know you've contributed)

3) Every month, we will highlight your contributions, and select a "Guru of the Month" in each technology.

If you win, we will sing your praises in blogs and forums, similar to the weekly contributor awards. Once "on our radar" and making your mark, you will probably be interviewed for your greatness, and maybe eventually even invited into other inner TechNet/MSDN circles!

Winning this award in your favoured technology will help us learn the active members in each community.

Feel free to ask any questions below.

More about TechNet Guru Awards

Thanks in advance!
Pete Laker


#PEJL
Got any nice code? If you invest time in coding an elegant, novel or impressive answer on MSDN forums, why not copy it over toTechNet Wiki, for future generations to benefit from! You'll never get archived again, and you could win weekly awards!

Have you got what it takes o become this month's TechNet Technical Guru? Join a long list of well known community big hitters, show your knowledge and prowess in your favoured technologies!



#PEJL
Got any nice code? If you invest time in coding an elegant, novel or impressive answer on MSDN forums, why not copy it over toTechNet Wiki, for future generations to benefit from! You'll never get archived again, and you could win weekly awards!

Have you got what it takes o become this month's TechNet Technical Guru? Join a long list of well known community big hitters, show your knowledge and prowess in your favoured technologies!

ghost expected rule entries - how to remove? FIM 2010

0
0

After practising with my test environment, I managed to get 177 expected rule entries in the metaverse. Now I have deleted all the users (except admin and ilmsync) from the FIM portal, but those expected rule entries are still in the metaverse.

All eres are named like sync rules.

How can I clean up those eres?

Users getting access denied when trying to create a security group

0
0

Hello,

I created an MPR for granting right through an approval workflow for joining security group, but getting the following error. Any thoughts what could be going wrong?

Error processing your request: The operation was rejected because of access control policies.
Reason: The operation failed as a result of insufficient access rights.
Attributes: ExplicitMember
Correlation Id: edc226e9-ecb9-42c2-ab20-4fa8b5643056
Request Id:
Details: No policy grants the Requestor permission to complete all changes.

This is what I see in the even log:

Requestor: urn:uuid:9373552a-c063-4fb9-abcd-3501d151a061

Correlation Identifier: edc226e9-ecb9-42c2-ab20-4fa8b5643056

Microsoft.ResourceManagement.Service: Microsoft.ResourceManagement.WebServices.Exceptions.PermissionDeniedException: ManagementPolicyRule ---> System.Data.SqlClient.SqlException: Reraised Error 50000, Level 16, State 1, Procedure DoEvaluateRequestInner, Line 1319, Message: Permission denied: <ai><Name>ExplicitMember</Name></ai>

   at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection)

   at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)

   at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)

   at System.Data.SqlClient.SqlDataReader.ConsumeMetaData()

   at System.Data.SqlClient.SqlDataReader.get_MetaData()

   at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString)

   at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async)

   at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, DbAsyncResult result)

   at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method)

   at System.Data.SqlClient.SqlCommand.ExecuteReader(CommandBehavior behavior, String method)

   at System.Data.SqlClient.SqlCommand.ExecuteReader()

   at Microsoft.ResourceManagement.Data.DataAccess.DoRequestCreation(RequestType request, Guid cause, Guid requestMarker, Boolean doEvaluation, Int16 serviceId, Int16 servicePartitionId)

   --- End of inner exception stack trace ---

   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.CreateRequest(UniqueIdentifier requestor, UniqueIdentifier targetIdentifier, OperationType operation, String businessJustification, List`1 requestParameters, CultureInfo locale, Boolean isChildRequest, Guid cause, Boolean doEvaluation, Nullable`1 serviceId, Nullable`1 servicePartitionId, UniqueId messageIdentifier, UniqueIdentifier requestContextIdentifier, Boolean maintenanceMode)

   at Microsoft.ResourceManagement.WebServices.ResourceManagementService.Put(Message request)

Thanks,
John

Apply flow rule to only some users in CS

0
0

Hi

I have this scenario, where i need to manage the Manager attribute for users in AD.
I only wan't to manage the attribute for users in a specific container, BUT manager can be in other containers.

Manager beeing a reference attribute, i'm not able to use advanced flowrules. Also, i have no FIM portal and will not, have FIM portal, so scoping filter is not possible.

Does anyone have an idea, besides use advanced join rule and project users from other containers as non-users. ?


/Frederik Leed



Populate TargetAddress from Mail attribute

0
0

Hi,

I have a management agent pulling AD information from a domain without Exchange, and I want to populate Target Address using the Mail attribute by putting SMTP:x@y.z infront of it.

I've found this article, but having not done any dev work before I'm a bit lost.

https://msdn.microsoft.com/en-us/library/windows/desktop/microsoft.metadirectoryservices.imasynchronization.mapattributesforimport(v=vs.100).aspx?cs-save-lang=1&cs-lang=vb#code-snippet-2

Something like cd.user:("SMTP:"mail)->mv.person:targetAddress

Can anyone point me the in right direction to write a custom expression to do this?

Thanks,

James

Lync LCSSync connector

0
0

Hello All,

I would like to use the LCSSync connector from the Lync Resource kit to sync users from other forests into contacts into our primary domain. The LCSSync connector can perform this synchronization, however, all contacts will be place into a single OU. We would like an OU structure that mimics the different forests:

OU=SyncOU

    |- Forest1Contacts

    |- Forest2Contacts

    |- ....

The only possibility I see at the moment to get this done, is to change the code of the LCSSync.dll. However, I do not have this source code, nor do I have insight into the actions performed by this connector.

Does anyone know where to find the source code, a full description of the actions performed or an alternative to this approach?

Thank you.

M.

create a new page or rcdc to create service accounts , employees and non employees

0
0

I have a request where FIM portal will accessed by HR and other users for creating employees , non employees and service accounts.Based on their permissions they will be able to create accounts.

Is it possible to keep current user creation rcdc intact and create 3 RCDC for service accounts , non empolyees and employees with their respective attributes ? depending on user perms they will see the links in portal.

Say HR logs in he will see only employee creation.

support team can only see service account creation and manager;s non employees - I know this can be achieved by setting different UI permissions but how about RCDCs?

Please advice and guide in this regard.


AdiKumar

Which is the easiest way to provide Ad Hoc Reports within FIM framework?

0
0

A customer has expressed a wish to have ad hoc User reports. These reports would be reporting the CURRENT situation, showing Applications, Groups or other requested User details. They would like both manager based and if requester is in the "Can report all Set",  a global user report.

The mechanics of creating these reports from FIM database is quite straightforward with FIM and/or ActiveDirectory cmdlets.

What I am struggling with is the User Interface to the Powershell.

Which is the way to go?

Service Center 2012 and its Reporting methods (ugh!)  or

Own developed FIMAdHocReports.aspx with the URL plugged into FIM home page.

Mainstream Support of FIM 2010 R2 SP1 ends this summer 2015? Where is the next version?

0
0

Hi, 

I was searching the EOL date(s) for FIM 2010 R2 SP1. My conclusions are (because there's no next Service pack) that the mainstream support ends the 14th of July 2015 and FIM 2010 R2 SP1 goes in "extended support".

However, there's no next version of FIM (aka MIM) available yet. I've found article https://identityunderground.wordpress.com/tag/mim-2015/ where was stated that with the release of MIM, FIM 2010 R2 SP1 it's support will be extended to 2017. Is that actually true? Why isn't it updated on the EOL site of Microsoft?

If a company does not have "extended hotfix support (EHS)" via Premier Services, how can they run fully supported? Additionally, the "extended hotfix support" from Premier is quite costly and the "proposed" approach is "update to the latest version" as its probably cheaper.

Kind regards,
David

Discussion Forum for Microsoft Identity Manager 2015?

0
0
Is there a forum for asking questions about the new identity manager product, such as included features?  We're trying to determine if any new identity management products from Microsoft will include support for either SCIM v1 or v2.

Another question related to Expected Rule Entries

0
0

I have a basic scenario. I just import a user from csv-file to Fim Portal and then import it to Ad. Then I removed the user using Fim Portal and then export modifications to the Ad. So basically I am in the situation where the whole system should be untouched.

But still Expected Rule Entries stays in the metaverse. I thought EREs should be removed also.

So when EREs are removed from the system?


FIM MA Export errors. There is an error executing a web service object creation.

0
0

While checking for the permission, we have figured that the Built-In Synchronization account is being deleted by an Expiration Workflow.

FIM MA Export errors. There is an error executing a web service object creation.

While checking for the permission, we have figured that the Built-in Synchronization account was deleted by an Expiration Workflow

Is there a way to restore. Thanks.


FIM Powershell error

0
0

hello, 

i try to update a custom object with Powershell in FIM and i have this error 



Any idea ? 

Regards

توكيل غسالات كلفينيتور 01014480097 – 01068982008 اصلاح دراير كلفينيتور

0
0

                                                     

صيانة كلفينيتور 01112225250 // 01068982008 KELVINATOR

توكيل كلفينيتور مصر الجديدةصيانة كلفينيتور التجمع الاول صيانة كلفينيتور التجمع الثالث -صيانة كلفينيتور التجمع الخامس

صيانة كلفينيتور شيراتون والمطارتوكيل كلفينيتور مصر الجديدةتوكيل كلفينيتور مدينة نصرصيانة كلفينيتور المقطم ,توكيل كلفينيتور الهرم ,صيانة ثلاجات كلفينيتور

 صيانة كلفينيتور فى المقطم -صيانة كلفينيتور فى المعادى -صيانة كلفينيتور فى الزمالك -صيانة كلفينيتور فى المهندسينصيانة كلفينيتور فى الدقى -صيانة كلفينيتور فى روض الفرج -صيانة كلفينيتور فى الهرم -صيانة كلفينيتور فى فيصلصيانة كلفينيتور فى المنيل صيانة كلفينيتور فى الشيخ زايد صيانة كلفينيتور فى بولاقصيانة كلفينيتور فى العجوزة صيانة كلفينيتور فى حدائق الاهرام -صيانة كلفينيتور فى الجيزة -صيانة كلفينيتور فى 6اكتوب

توكيل كلفينيتور فى الزمالك,توكيل كلفينيتور فى شارع شهاب توكيل كلفينيتور فى روكسى

توكيل كلفينيتور فى شارع احمد عرابى توكيل كلفينيتور فى جامعة الدول العربية ,توكيل كلفينيتور فى جسر السويس ,صيانة كلفينيتور فى حلمية الزيتون

توكيل كلفينيتور فى 6اكتوبر صيانة كلفينيتور فى الشيخ زايد صيانة كلفينيتور فى الاسكندرية توكيل كلفينيتور فى المنصورة

صيانة غسالات كلفينيتور KELVINATOR توكيل كلفينيتور العجوزة توكيل كلفينيتور المهندسينشركة توكيل كلفينيتور

 صيانة كلفينيتور فى العجوزة صيانة كلفينيتور فى حدائق الاهرام -صيانة كلفينيتور فى الجيزةصيانة كلفينيتور فى المقطم -صيانة كلفينيتور فى المعادى -صيانة كلفينيتور فى الزمالك -صيانة كلفينيتور فى المهندسينصيانة كلفينيتور الرحاب توكيل كلفينيتور التجمع الخامس,صيانةتوكيل كلفينيتور الرحاب,صيانة كلفينيتور المقطم ,صيانة كلفينيتور الهرم ,صيانة كلفينيتور المعادى ,صيانة كلفينيتور التجمع الاول,صيانة كلفينيتور فى الدقى -صيانة كلفينيتور فى روض الفرج -صيانة كلفينيتور فى الهرم -صيانة كلفينيتور فى فيصلصيانة كلفينيتور فى المنيل صيانة كلفينيتور فى الشيخ زايد صيانة كلفينيتور فى بولاق-صيانة كلفينيتور فى 6اكتوبر توكيل كلفينيتور فى مدينة نصر كلفينيتور فى مصر,كلفينيتور ,مركز توكيل ثلاجات كلفينيتور ,مركز توكيل غسالات كلفينيتور ,توكيل صيانة ثلاجات كلفينيتور ,توكيل غسالات كلفينيتور,اصلاح كلفينيتور ,صيانة كلفينيتور الرحاب,صيانة كلفينيتور المقطم ,توكيل كلفينيتور الهرم ,توكيل كلفينيتور المعادى ,توكيل كلفينيتور التجمع الاول,توكيل كلفينيتور التجمع الخامس,صيانةتوكيل كلفينيتور الرحاب,صيانة كلفينيتور المقطم ,صيانة كلفينيتور الهرم ,صيانة كلفينيتور المعادى ,صيانة كلفينيتور التجمع الاول,صيانة كلفينيتور التجمع الخامسكلفينيتور, Agent KELVINATOR, MaintenanceKELVINATORتوكيل صيانة كلفينيتور فى الاسكندرية توكيل صيانة كلفينيتور فى المنصورةصيانة كلفينيتور الوكيل الرسمى عنوان صيانة كلفينيتور رقم صيانة كلفينيتور صيانة كلفينيتور صيانة غسالات كلفينيتورتوكيل صيانة ديب فريزر كلفينيتور توكيل غسالات اطباق كلفينيتوراين اجد صيانة كلفينيتور فى مصر مراكز صيانة كلفينيتور المعتمد صيانة كلفينيتور مصر توكيل تصليح ثلاجات كلفينيتور وكيل كلفينيتورصيانة كلفينيتور خدمة كلفينيتور ثلاجة كلفينيتور غسالة كلفينيتور مركز كلفينيتور اصلاح كلفينيتور صيانة كلفينيتور مصر الجديدة صيانة كلفينيتور المهندسينصيانة كلفينيتور المعادى صيانة كلفينيتور الجيزة صيانة كلفينيتور الرحاب صيانة كلفينيتور مدينة نصر اصلاح ثلاجات كلفينيتور اصلاح غسالات كلفينيتوراصلاح كلفينيتور صيانة كلفينيتور المنصورة صيانة كلفينيتور الاسكندرية صيانة كلفينيتور التجمعات، صيانة كلفينيتور داخل مصر الوكيل المعتمد لتوكيل الاجهزة المنزليةتوكيل ثلاجات كلفينيتور توكيل غسالات كلفينيتور توكيل ديب فريزر كلفينيتور، صيانة كلفينيتور المنصورة صيانة كلفينيتور الاسكندريةصيانة كلفينيتور المهندسين صيانة كلفينيتور المعادى صيانة كلفينيتور الجيزة صيانة كلفينيتور الرحاب صيانة كلفينيتور المنصورة صيانة كلفينيتور الاسكندريةصيانة كلفينيتور التجمعات، صيانة كلفينيتور داخل مصر الوكيل المعتمد لتوكيل الاجهزة المنزلية صيانة كلفينيتور (ثلاجات، غسالات ملابس، ديب فريزر، مجفف، غسالات اطباق، دراير، لاندرى).قطع غيار كلفينيتور ثلاجات كلفينيتور غسالات كلفينيتور ديب

Oracle EBS Magement Agent - supported veriosns of EBS

0
0

Hello,

Did anybody tested Oracle EBS management agent with higher version than the one officially stated in documentation (12.1.3).

I need to know if it works with version: 12.2.3


Borys Majewski, Identity Management Solutions Architect (Blog: IDArchitect.NET)

FIM Portal authentication

0
0

As an effort to give an SSO experience, I am building a asp .net shim that takes credential (username/domain/password) via an HTTP POST call, impersonates with that credential and then launch FIM portal from the impersonate mode. however, a prompt for username/password is still being raised before landing to the FIM portal. Any insight what can be done to directly land on the FIM portal w/o entering the username/password?

Viewing all 4767 articles
Browse latest View live




Latest Images