none
Comparing data from 2 connected systems via FIM? RRS feed

  • Question

  • Hi,

    We would like to know if its possible to use FIM to extract a difference table about 2 connected data sources?

    We want to import data from an HR system into FIM.

    Then we want to import data from AD into FIM. Join both data sources in the MV.

    However, since the data may be somewhat different, how do we extract a list of the extra records that we may have?

    thank you,

    SK

    Monday, October 21, 2013 5:25 AM

Answers

  • As I understand your needs, you need to do it once only. If so, here is the way how you may achieve it without external coding:

    After configuring suitable two agents and join rules for them, configure also attribute flows - for example like:

    AD MA:
    sAMAccountName -(import)> Person:accountName

    sAMAccountName <(export)- Person:accountName

    join rule: sAMAccountName=accountName

    SQL MA:
    AccountName -(import)> Person:accountName

    AccountName <(export)- Person:accountName

    join rule: AccountName=accountName

    Now, do import steps on both MAs. Make sure "provisioning" in options is disabled and invoke Full Synchronization on both agents.

    Status: You have suitable accounts joined.

    Now to find differences (what is in AD and not in SQL and the other way also), enable provisionig in options and to Full Synchronization once again. DO NOT Export changes!

    Use csexport tool (already in FIM) to export pending changes from both agents to xml files.

    Now, you've got the differences in those files and you can check them.


    Keep trying

    • Marked as answer by Shim Kwan Monday, October 21, 2013 9:02 PM
    Monday, October 21, 2013 4:01 PM

All replies

  • Hello,

    I am not quite sure why you want to do this, but you can create provisioning code to an extra SQL MA and Provision all objects which do not have an AD connector. (check the MA.ConnectorCount).

    Regards
    Peter


    Peter Stapf - Doeres AG - My blog: JustIDM.wordpress.com

    Monday, October 21, 2013 7:50 AM
  • As I understand your needs, you need to do it once only. If so, here is the way how you may achieve it without external coding:

    After configuring suitable two agents and join rules for them, configure also attribute flows - for example like:

    AD MA:
    sAMAccountName -(import)> Person:accountName

    sAMAccountName <(export)- Person:accountName

    join rule: sAMAccountName=accountName

    SQL MA:
    AccountName -(import)> Person:accountName

    AccountName <(export)- Person:accountName

    join rule: AccountName=accountName

    Now, do import steps on both MAs. Make sure "provisioning" in options is disabled and invoke Full Synchronization on both agents.

    Status: You have suitable accounts joined.

    Now to find differences (what is in AD and not in SQL and the other way also), enable provisionig in options and to Full Synchronization once again. DO NOT Export changes!

    Use csexport tool (already in FIM) to export pending changes from both agents to xml files.

    Now, you've got the differences in those files and you can check them.


    Keep trying

    • Marked as answer by Shim Kwan Monday, October 21, 2013 9:02 PM
    Monday, October 21, 2013 4:01 PM
  • thank you !
    Monday, October 21, 2013 9:02 PM