Thursday, January 10, 2013 3:13 PM
My AD MA has some connection filter declared for users:
- mailNickname is not present
- sAMAccountName is not present
- mail is not present
- displayName is not present
Now I would like to let the users without any email related attributes (mailNickname and mail) flow into FIM.
So I have modified connection filter by removing these attributes and was hoping that import/sync will do what I need.
But the disconnectors stay disconnected.
Is this by design or am I doing something wrong?
Thursday, January 10, 2013 4:03 PM
- Check the MA configuration and ensure all the filters are removed (maybe post a screenshot?)
- Run a Full Synchronization on the MA
That should fix it... if it doesn't, find one of the disconnected objects in the AD Connector Space and do a preview synchronisation on them to see what happens.
FIMSpecialist.com | MCTS: FIM 2010
- Marked As Answer by Rafał Grzybowski Thursday, January 10, 2013 9:41 PM
Thursday, January 10, 2013 7:13 PM
You just need to remove the mail and mailnickname filter and run a full import and full synchronization on AD. It should work.
If these filters are on the FIM MA as well you need to remove them as well and run full import and full sync on the FIM MA too.
- Marked As Answer by Rafał Grzybowski Thursday, January 10, 2013 9:42 PM
Thursday, January 10, 2013 9:41 PM
You are both right. This should work and it does.
The problem was external system scoping filter for user inbound synchronization rule.
The scope was based on mail attributes, and was left there by accident when I was evaluating different ideas for filtering.
After removing external system scoping filter for this rule, then performing delta import/sync on FIM MA and finally AD MA synchronization, everything worked fine.
Before removing this external system scoping filter, synchronization preview showed no matches for filters configured directly on AD MA.
And there was no information about external system scoping filter being used.
Thank you and best regards