none
FIM Lab standalone server RRS feed

  • Question

  • hello,

    I want to prepare a lab for my FIM deployment. do you think it is possible to have all roles in a single server? I mean to have portal sync and SCSM on a single server. this is because I am running low on resources and as a result I want to have a FIM server for everything related for my FIM.

    Thanks

    Tuesday, July 14, 2015 5:12 AM

Answers

  • Yes it is. You need separate SQL Instances, though, for the SCSM.

    Nosh Mernacaj, Identity Management Specialist

    • Proposed as answer by Nosh Mernacaj Tuesday, July 14, 2015 5:16 PM
    • Marked as answer by MatCollins Tuesday, July 21, 2015 5:24 AM
    Tuesday, July 14, 2015 12:53 PM
  • Nosh and Shim are saying almost the same thing -- that you have to separate out some of the SCSM related roles for reporting. They differ as to exactly what and how to separate.

    To answer your follow up question: If you leave out reporting can you install FIM Sync, FIM Service, FIM Portal, and FIM SSPR on a single server -- the answer is yes.

    If you add in reporting according to the SCSM setup guide you do need to separate a few pieces (this provides a great image).

    The SCSM deployment scenarios clearly indicates the need for separate computers for separating SCSM services "you cannot deploy a Service Manager management server and a data warehouse management server on the same computer. In fact, Setup prevents you from installing both on a single server."

    It does go on to describe how to install it on one server: "Describes how to install Service Manager on a single computer. This scenario requires you to use a virtual machine for the data warehouse management server. This scenario is useful for evaluation purposes." So you can put them all on the same physical box but on different instances of the OS.


    David Lundell, Get your copy of FIM Best Practices Volume 1 http://blog.ilmbestpractices.com/2010/08/book-is-here-fim-best-practices-volume.html

    Thursday, July 16, 2015 9:08 PM
  • Service accounts are another question, although that is not the case. You can have the same service accounts. 

    Nosh Mernacaj, Identity Management Specialist

    • Marked as answer by MatCollins Tuesday, July 21, 2015 5:23 AM
    Monday, July 20, 2015 1:24 PM

All replies

  • Yes it is. You need separate SQL Instances, though, for the SCSM.

    Nosh Mernacaj, Identity Management Specialist

    • Proposed as answer by Nosh Mernacaj Tuesday, July 14, 2015 5:16 PM
    • Marked as answer by MatCollins Tuesday, July 21, 2015 5:24 AM
    Tuesday, July 14, 2015 12:53 PM
  • If you are using SCSM for FIM Reporting, you will also have to split the SCSM and SCDW SQL databases unto 2 different servers
    Wednesday, July 15, 2015 2:42 AM
  • If you are using SCSM for FIM Reporting, you will also have to split the SCSM and SCDW SQL databases unto 2 different servers

    sorry i did not get it. Nosh says that I can have them all on one server but maybe i did not understand correct. could you clarify? 

    what happens if i skip reporting? is it a need? i mean in which sections do the reports are generated? in portal?

    Wednesday, July 15, 2015 11:48 AM
  • You need separate SQL instances not Separate SQL servers.

    Nosh Mernacaj, Identity Management Specialist

    Wednesday, July 15, 2015 12:02 PM
  • Here are the official pre-requisites for Reporting.  https://technet.microsoft.com/en-us/library/jj133863(v=ws.10).aspx

    Nosh Mernacaj, Identity Management Specialist

    Wednesday, July 15, 2015 12:56 PM
  • Nosh and Shim are saying almost the same thing -- that you have to separate out some of the SCSM related roles for reporting. They differ as to exactly what and how to separate.

    To answer your follow up question: If you leave out reporting can you install FIM Sync, FIM Service, FIM Portal, and FIM SSPR on a single server -- the answer is yes.

    If you add in reporting according to the SCSM setup guide you do need to separate a few pieces (this provides a great image).

    The SCSM deployment scenarios clearly indicates the need for separate computers for separating SCSM services "you cannot deploy a Service Manager management server and a data warehouse management server on the same computer. In fact, Setup prevents you from installing both on a single server."

    It does go on to describe how to install it on one server: "Describes how to install Service Manager on a single computer. This scenario requires you to use a virtual machine for the data warehouse management server. This scenario is useful for evaluation purposes." So you can put them all on the same physical box but on different instances of the OS.


    David Lundell, Get your copy of FIM Best Practices Volume 1 http://blog.ilmbestpractices.com/2010/08/book-is-here-fim-best-practices-volume.html

    Thursday, July 16, 2015 9:08 PM
  • Nosh and Shim are saying almost the same thing -- that you have to separate out some of the SCSM related roles for reporting. They differ as to exactly what and how to separate.

    To answer your follow up question: If you leave out reporting can you install FIM Sync, FIM Service, FIM Portal, and FIM SSPR on a single server -- the answer is yes.

    If you add in reporting according to the SCSM setup guide you do need to separate a few pieces (this provides a great image).

    The SCSM deployment scenarios clearly indicates the need for separate computers for separating SCSM services "you cannot deploy a Service Manager management server and a data warehouse management server on the same computer. In fact, Setup prevents you from installing both on a single server."

    It does go on to describe how to install it on one server: "Describes how to install Service Manager on a single computer. This scenario requires you to use a virtual machine for the data warehouse management server. This scenario is useful for evaluation purposes." So you can put them all on the same physical box but on different instances of the OS.


    David Lundell, Get your copy of FIM Best Practices Volume 1 http://blog.ilmbestpractices.com/2010/08/book-is-here-fim-best-practices-volume.html

    Thank you david. i have last question: I am following your book and kents book. the thing is you both mentioned that I need service accounts for different services of FIM. the queation is, is it mandatory? I mean can i just use a single user account for all purposes if i am not concerned with security? 
    Monday, July 20, 2015 6:34 AM
  • Service accounts are another question, although that is not the case. You can have the same service accounts. 

    Nosh Mernacaj, Identity Management Specialist

    • Marked as answer by MatCollins Tuesday, July 21, 2015 5:23 AM
    Monday, July 20, 2015 1:24 PM
  • While it is technically possible to use the same account for all services, I am sure that Nosh means it might be ok for a lab, as this is a horrible practice for security.

    I usually prefer to use separate accounts in lab so that I can setup permissions the same way in production and not have export errors the first time I export to AD.

    However if you are building a lab to learn basic fundamentals and not as your testing ground for deploying to production then you could do it as a matter of convenience.


    David Lundell, Get your copy of FIM Best Practices Volume 1 http://blog.ilmbestpractices.com/2010/08/book-is-here-fim-best-practices-volume.html

    Monday, July 20, 2015 6:43 PM
  • 1. I was pointing out that this (Accounts) is irrelevant to the question asked (Servers)

    2. I was pointing out that it is technically possible and perfectly fine for a LAB


    Nosh Mernacaj, Identity Management Specialist

    Monday, July 20, 2015 7:13 PM
  • Nosh,

    I figured that #2 was where you were heading with it and thought I could pitch in to clarify. You have been doing a lot of good work in the forums.


    David Lundell, Get your copy of FIM Best Practices Volume 1 http://blog.ilmbestpractices.com/2010/08/book-is-here-fim-best-practices-volume.html

    Monday, July 20, 2015 8:52 PM
  • Thanks David,

    I just had a feeling that we are not serving any purpose by diverting this into something not intended by the requestor. 

    Also, when the threads are long and go all over the place, will be hard to be deciphered by future needy people.

    All good here. I hope we have been able to help Mat. :)


    Nosh Mernacaj, Identity Management Specialist

    Monday, July 20, 2015 8:56 PM
  • thank you everyone :)
    Tuesday, July 21, 2015 5:25 AM