Quantcast
Channel: Forum Microsoft Identity Manager
Viewing all articles
Browse latest Browse all 4767

About criteria-based groups and MPR

$
0
0

Hi,

We have to define groups in FIM with criteria-based feature. Groups are "dynamically" provisionned by FIM when a special value of a user attribut is set.

Ex : Groups for French people, with criteria based "Country = France".

When a user is updated with the Country value of "France", groups is automatically updated.

Very good.

The problem is that we have to synchronize users and groups with an AD. We have configured sets, workflow and MPR for users, and when an update is done (manually or by FIM sync), an expected rule entry is created and with MV sync it is propagated to AD.

But we wanted to have the same thing for groups. However, the dynamic update operated by FIM (following the user attribut set) is not "seen" as a request. So no ERE is created because the related MPR does'nt see the operation.

How could we do to make the automatic update of a criteriad-based group trigger our MPR and so the AD update ?

BR,


Viewing all articles
Browse latest Browse all 4767

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>