Quantcast
Channel: Forum Microsoft Identity Manager
Viewing all articles
Browse latest Browse all 4767

A question about best practice

$
0
0

Hello!

I just learning MIM and I'm very new to this but I have been using C# for many years. This test is just a test that I have made up to learn MIM.

I have created a database that act as a HR system and I have created a database that act as a AD system.
I have one agent for the HR and I have one agent for the AD. In the HR I have a column called endDate  which is the date when an employee is to leave the job. The startdate is when an employee is starting to work at the company. I have also a column called Inactive that is true when an employe has left the job which mean the person is no longer working at that company. I want the column Inactive in HR to be updated automatically to true by MIM when there is a valid value in endDate and startdate and the realation between these two is valid. The AD system has also a column called Inactive and I want this column to be updated to true automatically when endDate and startdate is valid and the relation between these two are valid.

When I want to test this I changed the endDate in the HR database and run all the profiles.

I project HR into MV and I join AD to matching HR object in MV. If there is no matching object in MV I use ShouldProjectToMV for those AD object that doesn't exit in HR.

There is two way to do this as I can see:
I have done it in this way and it works fine but I don't know if this way is reasonable acceptable.
On import flow from HR I check if endDate and startdate and relation is valid is so I set Inactive to true in MV.
I have also an direct export flow on Inactive which will set this attribute in CS for the HR system. If the attribute Inactive  has been changed in CS will this result in pending export for the HR.
I also want the AD system column Inactive to be updated as soon as the endDate has a valid value.
In the AD agent I have set an direct export flow on Inactive.
I have not set an import flow on Inactive for the AD system. But I can if I will.

The second way that this can be done is the following.
I have a direct import flow on Inactive and endDate and startdate .
For the HR system on export flow check endDate and startdate and the reralation and if valid set Inactive  to true.
For the AD system on export flow check endDate and startdate and the relation and if valid set Inactive  to true.


This checking for my solution is done in the MAR MapAttributesForImport. If I want to use the second solution I have to add this code to both the export flow for HR and for AD.

Which way is the best practice?
As I mentioned I'm very new to MIM.
I only use the Synchronization Service Manager so we don't use the Fim Portal.

//Tony


Viewing all articles
Browse latest Browse all 4767

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>