Ask a questionAsk a question
 

AnswerUpdate AD from External Data source (RC1)

  • Tuesday, November 03, 2009 7:22 PMSLMAdmin Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    I'm trying to update existing AD accounts from another Data source (initially a file, ultimately an Informix database).  I'm starting with the "Publishing Active Directory Users from Two Authoritative Data Sources" but I am substituting the attributes that are relevant to my situation.  Since I am updating existing accounts in AD rather than creating new ones.  I started by importing from AD into FIM followed by a Full Synch after configuring the various pieces int eh document.  Then I ran the various steps from the document above.  At this point, the changes are not making it into AD.  

    Is this the right way to proceed?
    Are there any must have attributes (I'm trying to connect using accountname/sAMAccountName)? 

    Thanks

    Steve Moss
    Pomona College

    Steve Moss Pomona College

Answers

  • Tuesday, November 10, 2009 6:46 PMCraig MartinMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    I've found Preview in Identity Manager to be helpful here.  It will show you if the rule is being applied/skipped or if it is just absent in which case you probably have a Set or MPR issue.
    CraigMartin – Oxford Computer Group – http://identitytrench.com

All Replies

  • Tuesday, November 03, 2009 10:43 PMMarkus VilcinskasMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Steve,

    depending on how much experience you already have with FIM, you might be better off starting with the introduction to inbound synchronization and introduction to outbound synchronization.
    If you are new to FIM, you have in the "publishing" document way too many variables - things that can go wrong.
    This is why I wrote the other two documents.

    As soon as you are familiar with the basics, you can use "publishing" document as starting point for something that is a bit more complex.
    I would compare this with driving a car without having a driver's license.

    You can certainly learn from accidents :o); however, I would rather try to avoid them...

    Cheers,
    Markus

    Markus Vilcinskas, Knowledge Engineer, Microsoft Corporation
  • Tuesday, November 03, 2009 10:51 PMSLMAdmin Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    I will look at them again.  My experience has been with MIIS 2003, so I am fighting the urge to do it the old way, but know it would be better to learn the MPR/Wf/SR way of doing things.  

    I know one area I am having problems with is Sets.  I got one account to update in AD by adding the record as a manually managed member, but can't get criteria-based to work.  In addition to Intro to Inbound and Intro to outbound and intro to sets management, is there any place else I should look?

    Thanks

    Steve Moss Pomona College
  • Wednesday, November 04, 2009 4:44 PMMarkus VilcinskasMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    For now, this should be good enough.
    When you are done with the docs, you should elaborate a bit further what your problem is.
    I'm not sure, I understand it completeley.

    Cheers,
    Markus

    Markus Vilcinskas, Knowledge Engineer, Microsoft Corporation
  • Thursday, November 05, 2009 11:16 PMSLMAdmin Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    The set defined in the portal looks for a certain value in the Company field (Company starts with  Updated).  When I did the inital imports/exports/Synchs the company field was blank in my input file.  When I updated the input text file with the word Updated for  the Company attribute, then re-run my various flows, the updated value shows up in the MV.  But if I search the FIM MA connector space, that value is not in records there.  I'm guessing that's why those recrods don't show up when I click View Members in the Set definition.

    Thanks

    Steve

    Steve Moss Pomona College
  • Tuesday, November 10, 2009 6:46 PMCraig MartinMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    I've found Preview in Identity Manager to be helpful here.  It will show you if the rule is being applied/skipped or if it is just absent in which case you probably have a Set or MPR issue.
    CraigMartin – Oxford Computer Group – http://identitytrench.com