Quantcast
Channel: Forum Microsoft Identity Manager
Viewing all 4767 articles
Browse latest View live

Dynamically change the user creation attributes

$
0
0

Hi,

I want to change the city options based on country. Suppose country is USA then the city attribute should take specific options only. It can be done while creating user or editing user. Suppose while creating user I have given country USA then when editing the user taking the country attribute can I define specific city options?

Also if a drop down is available for city, if not then validation will work fine.

I have configured MIMWAL too, if its possible on that.

Thanks


FIM MA - Delta import running endlessly

$
0
0

Hello!

I have stumbled across something new and exciting. A while back I had an issue with Delta Import on FIM MA running forever. When I stopped it manually it had imported almost 2 million objects, but there's only 120.000 in CS.

It continued to do so until I ran a full import, which solved the problem. I didn't put much though into this since I was about to upgrade to MIM shortly.

But yesterday, at the same customer, I ran in to the same issue. This time we've upgraded to MIM 2016 (4.4.1302) and everything has moved to new servers.

Has anyone else come across this issue? How do we avoid it in the future?

/Kristoffer

Using Soren's PS MA for REST API Post in XML format. How to adapt Export script for REST?

$
0
0

I have a working Powershell script that successfully posts to the API.  I am having trouble finding resources to help me adapt this into the script that the PSMA requires for Export.  I am only Exporting.  The objects are being created and updated in the MV through other MAs.  Here is the working script (via ISE).  I have a working Schema script for the 3 attributes already in the MA.  Can anyone assist me with adapting this to the Export.ps1 format that the PSMA requires to export the attributes?  What am I missing?  Thanks.

PARAM
(
  $Username,
  $Password,
  $Credentials,
  $ExportType,
  $Schema
)

BEGIN
{
}
PROCESS
{
$ContentType = "application/xml"
$URI = "https://securewebservicestest.domain.org/ProcessAutomationService/rest/api/request"

$RequestBody = @"<?xml version="1.0" encoding="UTF-8" standalone="yes"?><request type="MiMUserCreate"><credentials><username>svc_mim-lawson_rest</username><password>*************</password></credentials><parameters><parameter><name>USER</name><value>mike</value></parameter><parameter><name>EMP_NUM</name><value>91001</value></parameter><parameter><name>EMAIL</name><value>
            	test2@domain.org</value></parameter></parameters></request> "@

$Result = Invoke-RestMethod -Uri $URI -Method Post -Body $RequestBody -ContentType $ContentType

foreach ($can in $_.ChangedAttributeNames)
      {
        $can | out-file -filepath D:\Software\Temp\Debug.txt -append
        
          }

}
END
{
}


Mike Leach | http://blogs.catapultsystems.com/mleach/default.aspx

MIM 2016 SSPR Question Gate - Allow Help Desk to See User's Answers

$
0
0

Hi everyone,

We have a MIM 2016 implementation and are possibly moving to MIM SSPR from a 3rd Party Tool.  One of the things our Security team is wondering is if our Help Desk is able to see/administer user's Security Questions so they can authenticate them if they call into the Help Desk with an account issue.  I heard off-handed that MIM 2016 did not support this and you could not see what users put for their Security Questions.  I tried doing numerous searches on the topic but did not find any clear answers on this.

If users enroll/answer Security Questions, is there anyway for Administrators or Users with Elevated Rights in the Portal to see what they have put as their answer to accomplish this?

Thank you in advance for any helpful information/insight you may have on this!

MIM 2016 setup failing during installation

$
0
0

Using SQL 2014 SP3 for the installation and getting the error shown above. SQL is installed on another server. Errors showing no hints.Can anyone please advise, how to fix this issue? 

Action ended 19:45:39: CheckDotNetVersion. Return value 1.

Info 2898. For WixUI_Font_Normal__UL <g class="gr_ gr_67 gr-alert gr_spell gr_inline_cards gr_disable_anim_appear ContextualSpelling ins-del multiReplace" data-gr-id="67" id="67">textstyle</g>, the system created a 'Tahoma' font, in 0 character set, of 13 pixels height.
Action 19:45:39: SqlCredDlg. Dialog created
MSI (c) (88:84) [19:45:39:491]: PROPERTY CHANGE: Deleting MsiSelectionTreeSelectedFeature property. Its current value is 'ResetPortal'.
MSI (c) (88:84) [19:45:39:491]: PROPERTY CHANGE: Deleting MsiSelectionTreeSelectedAction property. Its current value is '2'.
MSI (c) (88:84) [19:45:39:491]: PROPERTY CHANGE: Deleting MsiSelectionTreeSelectedCost property. Its current value is '0'.
MSI (c) (88:84) [19:45:45:180]: PROPERTY CHANGE: Modifying SQLSERVER_SERVER property. Its current value is 'DGAMIM01'. Its new value: 'dbMIM'.
MSI (c) (88:84) [19:45:45:242]: Doing action: CheckDatabaseNameFormat
Action 19:45:45: CheckDatabaseNameFormat. 
Action start 19:45:45: CheckDatabaseNameFormat.
MSI (c) (88:90) [19:45:45:242]: Invoking remote custom action. DLL: C:\Users\SA_PSH~1\AppData\Local\Temp\MSI8E65.tmp, Entrypoint: CheckDatabaseNameFormat
MSI (c) (88!44) [19:45:45:258]: PROPERTY CHANGE: Adding IS_VALID_DATABASE_NAME property. Its value is '1'.
Action ended 19:45:45: CheckDatabaseNameFormat. Return value 1.
MSI (c) (88:84) [19:45:45:258]: Doing action: CheckSQLConnectionAndVersion
Action 19:45:45: CheckSQLConnectionAndVersion. 
Action start 19:45:45: CheckSQLConnectionAndVersion.
MSI (c) (88:64) [19:45:45:258]: Invoking remote custom action. DLL: C:\Users\SA_PSH~1\AppData\Local\Temp\MSI8E75.tmp, Entrypoint: CheckSQLConnectionAndVersion
MSI (c) (



MIMWAL account name like lastname+firstname firstletter, firstname second letter etc till the firstname gets end than we have to pick the middlename firstletter, middlename lastletter like so on

$
0
0

Hi All

I want to generate account name using MIMWAL in MIM Portal as below

Account name like last name+first name first letter, first name second letter etc till the first name gets end than we have to pick the middle name first letter, middle name last letter like so on

Thanks

FIM Portal Site + Password Reset Site+ Password Registration Site

$
0
0

Hi All,

I am not sure why MS keep on providing wrong articles!

I am looking for a suggestion from people done the MIM project for SSPR earlier.

I was going through this: https://docs.microsoft.com/en-us/microsoft-identity-manager/install-mim-service-portal

  1. I found, that they are asking to configure Portal Site + Password Reset Site+ Password Registration Site for Port 80.
  2. In the best Practices web page they are asking to configure Portal Site to use 443.

Now, Portal Site + Password Reset Site+ Password Registration Site for Port 80 will make only Portal is working and others are stopped cause (we cannot run more than 1 web site using 80 port). when I came to configure SSRP site with 443 and SSL, I found that Portal Site is aleady based on BP should be working on 443 and SSL!

Let us forget all the shit mentioned in the articles, and please from your experiance, let me know what could be the best ports for:

  • Portal Web Site, best port?
  • Password Reset Site, best port?
  • Password Registration Site, best port?

Appreciated your respond.

 

Custom Configuration for User Viewing RCDC Issues

$
0
0

Hi All, 

I've been working towards adding a field to the Contact Info tab for the 'msidmPhoneGatePhoneNumber' attribute, so that our helpdesk team can quickly see if a user has a number registered for SSPR. 

So far, i've done the following:

  1. Taken a backup of the default RCDCs.
  2. Edited the 'Configuration for User Viewing' RCDC by adding the following code under the grouping for the Contact info Tab. I copied the 'mobilePhone' attribute and modified it using the system name for the Phone Gate phone number attribute.  
<my:Control my:Name="msidmPhoneGatePhoneNumber" my:TypeName="UocLabel" my:Caption="{Binding Source=schema, Path=msidmPhoneGatePhoneNumber.DisplayName}" my:Description="{Binding Source=schema, Path=msidmPhoneGatePhoneNumber.Description}"><my:Properties><my:Property my:Name="Required" my:Value="{Binding Source=schema, Path=msidmPhoneGatePhoneNumber.Required}"/><my:Property my:Name="Text" my:Value="{Binding Source=object, Path=msidmPhoneGatePhoneNumber, Mode=TwoWay}"/></my:Properties></my:Control>

   3. Uploaded the new RCDC into the portal.

When using the portal to view a user (ticking the box and clicking details), the page just pops up with the 'unable to process your request' error.

If i click on the users name in the list, the edit window opens fine. 

I've had a look at capturing the logs, but they don't seem to indicate an obvious cause.

Has anyone else come across this before

Thanks

Anthony



ID victim professional expert i'm seeking

$
0
0
I have a problem that is not associated with this area but i am seeking a professional person of ITT that knows how to ethically hack back my ID online.  This is a position of extreme  qulifications and it is a must that you can be in one place for hours.  A group is the ideal of approximately 11 people to cycle through the dedicated thoughtful ideas you may apply for ecommerce patents to be finalized overhead.  No diversity, authentic personalities wanted.  Great accounting verbal management and processing time.  Cinema experience of extreme standards.  Special email address is necessary and must already exist.  Devotion is a must and has to be capable of verbal hacking skills in order to keep my product-liability formal.  The intelligent containment system is a complex biological machinery where improvement is the thought processes we are seeding.  No individuals without a firm esteem.  Hard core fighting back the opposing illegal hackers is an effort which is handsomely rewarded for both the group and the entity of the product.  No breaking Ethical Law of human interaction.  Use of this product is to be kept under watchful eye of others noticeable to your group.  The Perception of this job is to aa a group intellectually unblock every alteration that it has already and turn it into better intellect of private nature.  Hosting is necessary.   Off-time is every other year and configuration of its counterworks is what must be solved.  Forensics Education is mandatory or 6 years lab assistance.  Forensics understanding will be tested before hire.

Oops! Something went wrong. The ajax calls failed, please contact your administrator. Status code: 401. Error: Unauthorized.

$
0
0


Sample Portal (8090) and download of thepamroles.json file not working from remote machines. They are working from PAM server browser (locally). Can anyone advise, how to fix this issue?

PAM Sample Portal 8090 - Enter credentials 3 times

$
0
0

In PAM Sample Portal, User has to provide password 3 times. Is there any way that we can limit it to 1 time?

Web Service Connector Tool - complex \ nested objects

$
0
0

Hello,

I am following this guide to create a new REST connector for my MIM 2016: https://docs.microsoft.com/en-us/microsoft-identity-manager/reference/microsoft-identity-manager-2016-ma-ws-restgeneric#next-steps

this is my sample response:

{"EmployeeList": [
		{"Id": <TZ-id-number>,"EmployeeId": <worker-id>,"Name": {"first": <first-name>, "sir": <sir-name>},"Contract":{"code": <code number>,"desc": <description>},"Classification": {"code": <code number>,"desc": <description>},"Status": {"code": <code number>,"desc": <description>},"Company": {"code": <code number>,"desc": <description>},"Job": {"code": <code number>,"desc": <description>},"Position": {"code": <code number>,"desc": <description>},"Department": {"code": <code number>,"desc": <description>},"SecondaryDepartments": [
									{"code": <code number>,"desc": <description>},
									{"code": <code number>,"desc": <description>},
									{"code": <code number>,"desc": <description>}
								],"Office": <office phone>,"Mobile": <mobile phone number>,"Home": <home phone number>,"HireDate": <date>,"RetireDate": <date>,"UpdateDate": <timestamp>
		}
	]
}

the guide doesn't specify how to select advanced objects - and I am unsuccessful in figuring it out by myself. 
for example how would I configure first name in the web service configuration tool?

MIM Sync exclude users from SSPR

$
0
0

Hi Dears,

I have MIM Sync, synced all my on-premises AD users.

How can I exuded users from ability to use SSPR?

Exclude users from SSPR

$
0
0

Hi Team,

I have a request to Exclude users from SSPR.

All users are Sync from AD to MIM.

I am new to this, I wish if you can guide me to location where I can exclude.

MIM 2016 SP1 Avoid registration

$
0
0

Hi Sir,

Sorry for many questions, i am new here, and I have no good background, and I am not able to find a quick response over internet.

My customer is looking if they can avoid Password Registration step, and let all users jump automatically to SSPR.

IF this is not possible then please help me with proof like from MS about this.

If this is possible, then please share with me the required steps


FIM MA creation error

$
0
0

Hi,

I am getting an error while creating FIM MA on synchronization service.

MIM 2016 - Authorization Worklfows triggered by multiple MPR's

$
0
0

Hi all,

I'm not sure if this is a bug or a feature. I am faced with the problem that an Authorization Workflow is triggered by multiple MPR's, as the user has multiple roles e.g. support and HR. Both MPRs trigger the same Authorization Workflow when an attribute is changed.
I now see in the search requests that two approvals are created, so the approvers also see two pending approvals in the portal.
If the approver processes only one of the two requests, the other is automatically set to the status that the approver has selected.
I wonder whether this is correct, whether two approvals are created, or whether this is an error. If it is correct, has anyone ever built a solution that starts only one Approval?

KR Mario

FIM MA creation error

$
0
0

Hi,

I am getting an error while creating FIM MA on synchronization service.

FIM to MIM upgrade

$
0
0

Hi,

We have FIM 2010 R2 running on a Windows 2012 server.

The FIM solution consists of several MV and MA Rules Extensions, PowerShell scripts, and some "Code Run" activities from https://github.com/sorengranfeldt/fimactivitylibrary.

Since Windows 2012 is supported by MIM 2016 SP1, can we simply do an in-place upgrade from FIM to MIM?

Will the MV and MA extension need a recompile?

I assume PowerShell will continue to work.

Will have to check with Soren Granfeldt on his FIM Portal activity.

Thank you,

SK


MIM 2016 - SP1 upgrade error

$
0
0

Hi Guys,

My current MIM version is 4.3.1935.0 and I am trying to upgrade to 4.5.286.0. Windows version is "Windows Server 2012 R2"

I downloaded the updates and when I tried to run through cmd prompt as Administrator I am getting below error. Please let me know how do I resolve this.




Regards, Chandan

Viewing all 4767 articles
Browse latest View live


Latest Images