none
Can a change to an AD object trigger a sync to FIM? RRS feed

  • Question

  • In my scenario FIM will provision and sync accounts to AD.  It is possible that the AD admin will also create accounts within AD using ADUC.  I understand that sync rules can be run to synchronize FIM and AD, however can the update occur automatically?  Or does the FIM admin actually need to logon to FIM, and 'manually' run the set of run profiles necessary to sync the environments.

    Thanks!

    Monday, October 22, 2012 9:53 PM

Answers

  • I'd schedule them using a batch file/script and the Windows Task Manager.

    When you configure your run profile there is a Script button that will give you the opportunity to save a vb script to invoke that run profile. Export the run profiles that you want to run and stich them together to fit your needs.


    --- Jesper Lönnqvist, Identity Architect http://addition-it.se

    • Marked as answer by Osho27 Tuesday, October 23, 2012 3:28 PM
    Tuesday, October 23, 2012 1:04 PM

All replies

  • There is no built-in functionality to let AD trigger a sync in FIM. You normally have to schedule the run profiles to run every x hours or so. Using third-party utilities such as FIM Event Broker you could led AD trigger a sync without the need to schedule it.

    In your scenario you might run in to issues deciding on which system is the source of authoritative data, FIM or AD.


    --- Jesper Lönnqvist, Identity Architect http://addition-it.se

    Tuesday, October 23, 2012 5:50 AM
  • Thanks Jesper - I just looked at FIM Event Broker.  Expensive.  Do you recommend scheduling jobs with powershell scripts or do the run profiles themselves have something built in for scheduling?
    Tuesday, October 23, 2012 12:51 PM
  • I'd schedule them using a batch file/script and the Windows Task Manager.

    When you configure your run profile there is a Script button that will give you the opportunity to save a vb script to invoke that run profile. Export the run profiles that you want to run and stich them together to fit your needs.


    --- Jesper Lönnqvist, Identity Architect http://addition-it.se

    • Marked as answer by Osho27 Tuesday, October 23, 2012 3:28 PM
    Tuesday, October 23, 2012 1:04 PM