Quantcast
Channel: Forum Microsoft Identity Manager
Viewing all 4767 articles
Browse latest View live

How to increase password change request history within the FIM Portal 2010 R2

$
0
0

Hi,

How to increase password change request history within the FIM Portal 2010 R2.

In my Environment this is expired 1 month old data but i need 90 to 150 days old data for password change request

for this i made one search scope for All Completed Password Reset Requests -

/Request[Creator='b0b36673-d43b-4cfa-a7a2-aff14fd90522' and RequestStatus=‘Completed']

so i want to know what i should do for this to increase password change request history within the FIM Portal 2010 R2

Regards

Anil Kumar


FIM and Onedrive - User Scenario

$
0
0

Hi,

I am looking for a way using FIM and Office 365 to address the following scenario if possible. We have situations where a user leaves the org (account will be deleted) and we need to archive their Onedrive files for retention.  I am looking for a way to use FIM and possibly Powershell to move the users Onedrive files to another location prior to the account being deleted.  Is this possible? 

Any thoughts or guidance is appreciated!

-KR

Failed Full Import Powershell Connector

Restrict user from deleteing users not related to his Department

$
0
0

I have a situation where we want "Department Admin"  to delete users only from his department

Department Admin is a boolean attribute where a user has it true of false. So if a user has true only he should be able to delete other users in his department

Please advice on how to use MPR to enforce this



Raj-Shpt



Different FIM SSPR Reset gate for different Users?

$
0
0

Hey All

So I have created the following Sets with manual users in it

  1. SSPR QA Gate - user1
  2. SSPR SMS Gate - user2

And created the following workflow

  1. Password Reset QA Gate AuthN Workflow - for user1
  2. Password Reset SMS Gate AuthN Workflow - for user2

How do I connect these through MPR and test that

  1. User1 gets QA gate for registration and reset
  2. User2 gets SMS gate for registration and reset

What all do I need to do ? According to the SSPR guide I have enabled the following MPRs

  • Enable the Management Policy Rule named “Anonymous users can reset their password”
  • Enable the Management Policy Rule named “Password reset users can read password reset objects”
  • Enable the management policy rule named “Password reset users can update the lockout attribute of themselves”
  • Enable the management policy rule named “User management: Users can read attributes of their own”
  • Enable the management policy rule named “General: Users can read non-administrative configuration resources”
  • Modify the management policy rule named “Administration: Administrators can read and update Users” to include new One Time Password attributes

How do I modify them (or any other thing) to get the different gates working for different users (sets)..

Thanks..



What is the smartest way to limit the number of Requests sent to FIMservice?

$
0
0

A customer is going to reorganize its departmental structure. This will affect every employee there (approx 5000 users).

There are now over 500 *new* AD groups and group membership depends directly and indirectly on the departmentNumber. The indirect method is handled by a PostProcess workflow activity. Direct membership is handled by a FIM Portal Criteria-based security group.

I am not so concerned with normal AD attributes, it is the sheer volume of group membership changes + post processes that I am concerned about. I have no idea how many concurrent operations an AD DC can handle before it gets swamped. I believe our clients are written so that any error including "directory service busy" aborts the update.

Potentially there suddenly could be 5000 requests sent to FIMService via export of 5000 updates to FIMMA .

What is the smartest way to configure this FIMMA to limit the number of exports to FIMMA  based on some crieteria e.g. "lastname starts with Ba" or "EmployeeID starts with 12"

FIM Reporting Resume-FIMReportingInitialSync too slow

$
0
0

I installed FIM Reporting services , and followed the document step by step.

I started the "Start-FIMReportingInitialSync" script  , it ran for some time and stopped due to an error.The error reads"The client has been disconnected from the server.Please call ManagementGroup.Reconnect() to reestablish the connection."

This issue as i understand might have occured due to a connectivity issue.

Hence i used the "Resume-FIMReportingInitialSync" to start the initial synce.but this script is too slow and even slower than the "Start-FIMReportingInitialSync".

Can anybody suggest how to speed up the Initial sync process.

Also, if anybody can tell me where are the data stored moved by the script "Start-FIMReportingInitialSync"

Regards






shakti

enable provisioning for FIM

$
0
0

Hi

This script as referenced by other documentation does not work, can anyone help? Is there an alternative way to "enable provisioning" other than this script? I am trying to follow this guide: http://technet.microsoft.com/en-us/library/ff686264(v=ws.10).aspx

http://social.technet.microsoft.com/Forums/en-US/8d9ae376-8d90-4b6e-8111-5ce9fa18e34e/using-powershell-to-enable-provisioning?forum=ilm2


Import Rule Extension Issue

$
0
0

Making changes on a custom import rule extension - issue is, changes don't seem to get picked up when MA runs sync.

Export sections picks up edits, but import does not. Very strange.

Code I have implemented just to check:

void IMASynchronization.MapAttributesForImport(string FlowRuleName, CSEntry csentry, MVEntry mventry)
        {
            switch (FlowRuleName)
            {
                case "cd.user:msExchMailboxGuid->mv.person:msExchMailboxGuidString":

                    throw new UnexpectedDataException("UPDATED");


            }
        }
does not throw error. Any ideas?

Bug with criteria based groups in FIM R2 SP1

$
0
0

Hello all,

We experience following unusual behavior within the FIM portal (FIM R2 SP1) with criteria based groups, which looks like a bug.

The behavior applies for all kind of criteria groups and can be reproduced with following steps:

  1. Open your criteria based group and click on your members tab: 

    2. Click on General Tabs 

      3. Click back to Members tab -->the criteria is not available anymore 


      Do anybody else experiences the same? This behaviour confuses our customers and leads to corrupted criteria based groups.

      Regards Fatih

      FIM RCDC- Create separate view options for administrators and non administrators

      $
      0
      0

      Hi,

      I have a requirement for having separate view options for administrators and non administrators with custom attributes.

      One RCDC which would cater to both Administrators and non-administrators.

      Can anybody suggest how to achieve it?

      Regards,


      shakti

      FIM error on windows 2012

      $
      0
      0

      Hi,

      I am trying to install the FIM 2010 R2 SP-1 on windows 2012. However, I  installed the .net frame work 4.5  using the add roles option. But unable to see the .net framework in the add removes program. I checked in the regedit that .net framework is installed and version is 4.5. Now I tried to install the FIM synchronization server,but getting the below error. I am installing FIM on windows 2012 first time. Please suggest me.

      Thanks

      Harry

      Sending Claims Attriubtes as Header instead of Cookies From ADFS

      $
      0
      0
      I don't know if this i the right place for this question, but here goes. I am using ADFS 2.0 for Single Sign On, I am sending claims attributes via a custom rule. The Application that I am trying to log into requires the claims sent as http header information instead of cookies. Is there a way to do that from ADFS?

      Neil Palmer

      Using requestor atributes to show a tab

      $
      0
      0

      Hi Masters!!!

      Is there a way to use an attribute from requestor (logged user in portal) to show/hide a tab in RCDC?

      Ex.: A Administrator has an attribute called ShowTAB (boolean) and in User RCDC make a bind to this attribute?

      thanks,


      Paulo


      ***** Paulo H. Campos - São Paulo/Brasil ***** http://identitypedia.blogspot.com (in PT-BR)

      FIM Design Question - Attributes and MPRs

      $
      0
      0

      Hello,

       I've noticed most of the default MPRs, as well Microsoft's own guides specify specific sets of attributes in MPRs rather than all attributes (almost to the point where all the attributes have been specifically listed out). I'm wondering whether there is a reason for this and if there is a performance hit or security concern with simply hitting the "all attributes" button?

      Thanks


      Approval Workflow for Creation, Changes and Deletion. On-Premise and AAD Premium.

      $
      0
      0

      I want to know if it’s possible to have an Approval Workflow (integrated with Outlook template) in order to allow the Creation, Changes, or Deletion of an user with some intervention (for example: Manager approval).

      I know that this was only possible for joining a user to a group. But can you clarify me if it’s possible my scenario with both: 1) FIM2010R2, and 2) AAD in the cloud. And, which Microsoft Office versions support integration with templates? 

      Thank you. 


      FIM and Gartner Magic Quadrant?

      $
      0
      0

      Hi,

      According to the latest info, FIM doesnt feature in Gartner's Magic Quadrant...is anyone else finding customers looking elsewhere (and not FIM) for IAM solutions?

      Leaders: Courion, Oracle SailPoint and RSA Eveska (EMC)
      Challengers: Hitachi ID Systems, Omada and NetIQ
      Visionaries: AlertEnterprise, CA Technologies, CrossIdeas, Dell and IBM
      Niche Players: Atos, Avatier, Beta Systems, Caradigm, Deep Identity, e-trust, Evidian, Fischer International, iSM Secu-Sys and SAP

      Cheers.

      How can I hide the provisioning tab from end users?

      $
      0
      0

      Hi,

      Can someone tell me if it's possible to hide the "provisioning tab" within FIM? End users do not need to see this.

      I know how to modify RCDCs to hide individual fields, but I'm not sure about entire tabs.

      Thanks in advance

      Populate second drop down list based on the result of the first drop down list

      $
      0
      0

      Hello,

       Is it possible within FIM to offer a drop down list, say "town", then upon selecting town, the second drop down list then displays all the sites associated with this town?

       I haven't seen this done before and I suspect that a custom front end is required, but am not sure, please advise.

      Thank you


      IT Support/Everything

      Change FIM Portal Attribute Data Type After Creation?

      $
      0
      0

      Hello All,

            I was wondering is it possible to update an user created attribute data type after the attribute has already been created. In my example I created an attribute of indexed string data type but what I meant to do was mark this attribute as datetime.

      Is there anyway for me to update this attribute data type? Or how do I go about deleting it from the portal and recreating it as right the right type. All the FIM portal users have this attribute populated already and there are several work flows and MPR's assigned to this attribute. 

      Viewing all 4767 articles
      Browse latest View live




      Latest Images