Quantcast
Channel: Forum Microsoft Identity Manager
Viewing all 4767 articles
Browse latest View live

Synchro Error - Group An Object with DN Already Exists in Management Agent

$
0
0

Hello, 

i have this error when i try a synchro in FIM MA , 

An object DN  with DN already exists in Management Agent AD. 

The object was imported by the AD connector but i don't find the DRE related to the object in the Metaverse. It's weird ??

Any idea ?? 

Thanks


Custom workflow in FIM 2010 R2 with IfElse branch activity how to get a value from function [//target/Locale]

$
0
0

Hi all,

I'm quite new in the WWF domain, but experienced with FIM 2010 R2.
I'm successfully using the workflows out of the box in FIM, even with the PowerShell activity.

I need to add an IfElse branch in the workflow described from this very nice example http://konab.com/automate-sspr-registration-fim-2010-r2/ , based on the Locale attribute of a user in FIM (by example values nl or fr). I've exported the XOML data out of the Workflow in FIM and I'm editing this with Visual Studio 2010 (to have a good starting point).

I've added a "get_Locale" function similar to the example of get_Email, but I don't have a clue how I can use the Declarative Rule Condition in the IfElse Branch to do a comparison the [//Target/Locale] with "nl" or "fr" string.

I've tried      [//Target.Local]=="nl"       but this is not accepted.

So how can I "read" the destination values of the GateActivity (Microsoft.Resourcemanagement.Workflow.Activities.functionactivity) and use them somewhere else in a workflow?
See screenshot:
screenshot visual studio workflow fim

Thanks for feedback and guidance in the WWF part of FIM :)
Kind regards,
David



FIM O365 synchronization from two forest

$
0
0

Hi I have to build FIM server to synchronize users from two separate forest to O365,

 internal.constoso.com and external.constoso.com, between them is no trust. Our plan is to build two ADFS farms in each forest to share SSO for user. We also need to build FIM in external.constoso.com forest. Question is can we use only FIM server from external.constoso.com forest to sync users from both forests or we need two separate FIM servers in each forest? Is that supported scenario when there is no trust between forests?

Thanks

osozu

 

Can we access FIM 2010 R2 ClientAdd-ins and extensions(rich Client) via Web URL in FIM 2010 R2?

$
0
0

Hi,

Can we access FIM 2010 R2 ClientAdd-ins and extensions(rich Client) via Web URL in FIM 2010 R2?

Regards

Anil Kumar

Self Service Password Registration Page taking more time for loading in FIM 2010 R2

$
0
0

Hi,

I have beeen successfullly installed FIM 2010 R2 SSPR and it is working fine

but my problem is that Self Service Password Registration Page taking more time for loading when i provide Window Credential,it is taking approximate 50 to 60 Seconds for loading a page in FIM 2010 R2

Regards

Anil Kumar

FIM Portal RCDC - CheckBox is not working

$
0
0

Hi everyone,

I am actually working on FIM Portal customization. I have created a custom attribute and mapped into a checkbox button.

I need that when the checkbox button is checked in the UI a Powershell script runs.

But when I check the button from the UI and save my settings, the button is not staying checked.

Do you have any idea about what is not going on? Thanks in advance for your reply.

Louban.

Sync rule - Allow Null to destination is allowing null even if unchecked

$
0
0

I added a new rules extension code to AD MA and after that I ran AD FS. AD FS triggered allow null values to be passed to various attributes in AD even if Allow null is not selected in sync rule flow. What might have caused this issue? This is the code I added.

        void IMASynchronization.MapAttributesForImport( string FlowRuleName, CSEntry csentry, MVEntry mventry)
        {
            switch (FlowRuleName)
            {
                case "homeMDB":
                    {
                        if (csentry["homeMDB"].IsPresent)
                        {
                            if (mventry["employeeID"].IsPresent)
                            {
                                mventry["homeMDB"].Value = csentry["homeMDB"].Value.ToString();
                            }
                        }
                    }
                    break;
            }

        }


FIM Reporting Re-Installation Issue

$
0
0


We have recently upgraded the entire FIM Environment from 4.1.3451.0 to 4.1.3510.0

For FIM Service, I have un-installed Reporting feature, installed the patched successfully, however when trying to re-install Reporting feature back onto the FIM Service Node it throws KB2561430 missing error. I have made sure KB2561430 and all the latest SCSM Cumulative updates are in place on SCSM and all the FIM Service Nodes

I tried to install the Reporting feature using the work around provided by MS, tried to install it using the command line for unattended installation and have made sure the value for EXISTINGDATABASE=1 and other parameters passed in the command are correct.

The unattended installation goes through fine, however I don't see Reporting feature installed when we go through Add/Remove Programs.

Can I remove FIM Service completely from the Server and try a clean install instead.

 

Has anyone experienced this kind of an issue, Any advice will be highly appreciated!

Thanks,

Abhishek.


FIMSyncAdmins Group is set to what? Registry Setting?

$
0
0

Hi,

I've got a hypothetical situation. Someone else installed FIM and now I have to manage it. Problem is I can't start the Synchronization Service Manager because I'm not a member of the "FIMSyncAdmins" group. But I can't find a FIMSyncAdmins group in AD. So the person that installed it didn't use the default security groups. How can I find which group I need to be placed in to be able to access the FIM Synchronization Service? Is it a Registry setting? I've already searched through it as well as looking at this page here: http://technet.microsoft.com/en-us/library/ff800821(v=ws.10).aspx 

Cheers,

Dan

FIM Portal slow (R2 SP1)

$
0
0

Hello all,

we have the latest FIM R2 SP1 installed and configured in our environment.

Unfortunatelly, we still experience following "performance issue", which we also had in FIM 2010.

The initial requests against the FIM Portal takes several seconds. After the initial request the portal response ultimatelty to the requests.

This happens the first time and is faster once you "active in the page", but if you leave the page then return 2 minutes later...its again very slow for the first request.

Any ideas?

Importing Multiple Users/SGs from Txt File to FIM portal using powershell

$
0
0

Hi

   I have a list of users in text file. These are users from an app on which IDM is being implemented. As a part of the initial load, i would like to add these users(who are in a text file) directly to the group that will be created in FIM Portal. Can anybody help me do the same using powershell scripts?

Thanks & Regards,

Rajesh K 

 

Enable Lync user with FIM Powershell activity

$
0
0
I've installed the FIM Powershell activity and am trying to figure out how to format the powershell commands to enable a lync user after creation.  I have the MPR and Set, just not the powershell that works within the activity.  Does anyone have this working and is willing to share the powershell used inside the workflow?

Importing a multiple users Trough Powershell Scripts

$
0
0

Hi All

Am completely new to this technology am having a source code for “Adding a single user to a SG Group” similarly I need to Add a multiple users through PowerShell scripts.

Set-Variable-NameGROUPNAME-Value"<My Group>"-OptionConstant
Set-Variable-NameUSERNAME-Value"<My User>"-OptionConstant
Set-Variable-NameURI-Value"http://localhost:5725/resourcemanagementservice"-OptionConstant
#--------------------------------------------------------------------------------------------------------------------
FunctionGetSingleResource
{
Param($Filter)
End
{
$exportResource=export-fimconfig-uri$URI`
–onlyBaseResources `
-customconfig ("$Filter")`
-ErrorVariableErr`
-ErrorActionSilentlyContinue
If($Err){Throw$Err}
If($exportResource-eq$null) {Throw"Resource not found: $Filter"}
If(@($exportResource).Count-ne1) {Throw"More than one resource found: $Filter"}
$exportResource
}
}
#--------------------------------------------------------------------------------------------------------------------
If(@(Get-PSSnapin|Where-Object {$_.Name-eq"FIMAutomation"} ).count-eq0) {Add-PSSnapinFIMAutomation}
Clear-Host
$ProgressPreference="SilentlyContinue"
#--------------------------------------------------------------------------------------------------------------------
$ProgressPreference="Continue"
Write-Progress-Activity"Retrieving group object"`
-Status"Please wait..."`
-CurrentOperation"Processing step 1 of 3"
$ProgressPreference="SilentlyContinue"
$groupObject=GetSingleResource-Filter"/Group[DisplayName='$GROUPNAME']"

$ProgressPreference="Continue"
Write-Progress-Activity"Retrieving user object"`
-Status"Please wait..."`
-CurrentOperation"Processing step 2 of 3"
$ProgressPreference="SilentlyContinue"
$userObject=GetSingleResource-Filter"/Person[DisplayName='$USERNAME']"

$importChange=New-ObjectMicrosoft.ResourceManagement.Automation.ObjectModel.ImportChange
$importChange.Operation=0
$importChange.AttributeName="ExplicitMember"
$importChange.AttributeValue=$userObject.ResourceManagementObject.ObjectIdentifier
$importChange.FullyResolved=0
$importChange.Locale="Invariant"

$importObject=New-ObjectMicrosoft.ResourceManagement.Automation.ObjectModel.ImportObject
$importObject.ObjectType="Group"
$importObject.TargetObjectIdentifier=$groupObject.ResourceManagementObject.ObjectIdentifier
$importObject.SourceObjectIdentifier=$groupObject.ResourceManagementObject.ObjectIdentifier
$importObject.State=1
$ImportObject.Changes= (,$ImportChange)

$ProgressPreference="Continue"
Write-Progress-Activity"Adding user to group"`
-Status"Please wait..."`
-CurrentOperation"Processing step 3 of 3"
$ProgressPreference="SilentlyContinue"

$importObject|Import-FIMConfig-Uri$URI-ErrorVariableErr-ErrorActionSilentlyContinue|Out-Null
If($Err){Throw$Err}
#--------------------------------------------------------------------------------------------------------------------
Write-Host"Command completed successfully"
#--------------------------------------------------------------------------------------------------------------------
Trap
{
Write-Host$_.Exception.Message-foregroundcolorwhite-backgroundcolordarkred
Write-Host$_.Exception.GetType().FullName-foregroundcolorwhite-backgroundcolordarkred
Write-Host"`n"
Exit1
}
#--------------------------------------------------------------------------------------------------------------------

Regards:

Rajesh.k


DISBALE IN AD IF DEPROVISION FROM EXTERNAL

$
0
0

Hello,

Users have been De-provisioned from HR/SQL and deleted in FIM/AD. However I need to change this option and instead of deleting users I need to disable them so that I can delete them manually whenever needed.

I have configured Stage a delete on the object for the next export run and all works fine.

Looking forward to seeing your help.

Regards
Sarwar


Sarwar

How to Read the "text file and csv file" through powershell Scripts

$
0
0

Hi All

i need to add a multiple users in a particular Group through powershell Script how to read the text and CSV files in powershell

am completly new to Powershell scripts any one pls respond ASAP.with step by step process pls

Regards:

Rajeshreddy.k


FIM Language Pack R2 SP1 version mismatch

$
0
0

Hello,

I would like to ask, if there is a way to download the "original" Language Pack for FIM 2010 R2 SP1 (4.1.3114). The download link on microsoft points out the newer version 4.1.3419 which forces me to apply the relevant hotfix as well. Is this intentional, or there is still a way to download the previous version of LP.

This is really messy, as the link on installation media is actually pointing to even older version for FIM 2010 R2 (4.1.2273)

Thanks.

Exchange 2010 - unable to attach NT Authority \SELF for returning users

$
0
0
I have scoped provsioning for exchange. If exchange = true, all the 3 mandatory exchange attributes are passed through AD MA. When exchange = false, a powershell workflow is called to remove the NT Authority\Self from mailbox. When exchange turns true, NT Authority \SELF is not added back??!! If UPDATE-RECIPIENT doesn't add NT Authority \self to mailbox, how it was added the first time when account was created?

Group RCDCs

$
0
0
I've added a simple UocDropDownList control to the 'Configuration for Group Creation' RCDC. At the moment however the control is displayed when creating both security groups and distribution groups. Is it possible to configure the control so that it is only displayed when creating security groups?

Cheers,

Tom Houston, UK Identity Management Practice

Bold the text font in SSPR Portal -"You must answer at least {0} questions to register. "

$
0
0

The self service password reset portal contains the text :

"You must answer at least {0} questions to register. "

I would like to make it appear bold. I  tried using tags like <b> , <strong> but with no effect.

Please post suitable solution for this.

FIMMA Delta Import - "Stopped Ma" but Full Import is fine.

$
0
0

Hello,

Recently came accross a scenario in my production server that, FIMMA's Delta import is giving error as "Stopped-Ma" but FIMMA Full Import is running fine. Can you please suggest some solution for ths?

FIMMA Delta Import was running very much fine 3 days back but from last 3 days, we are facing this issue.


Thanks,
Manuj Khurana


If my reply is helpful to you, don't forget to mark it as &quot;Helpful Post&quot; and if it is exactly the answer then &quot;Mark it as Answer&quot;.

Viewing all 4767 articles
Browse latest View live




Latest Images