none
How to join a FIM object with different AD object. RRS feed

  • Question

  • Hi,

    We have a forest with five child domains. FIM is used to provision AD account and update their attributes from SAP. I have situation where a user with same SamAccountName is present in two child domains. In both the domain the user was already exist and FIM joined with AD object in Domain1and updated all attributes. But we want FIM to join the metaverse object with AD object in Domain2 in this case only.

    How can I do it manually? Do I need to rename SamAccountName of the user in Domain1 to something else or is there any other alternative available?

    Monday, January 7, 2013 9:42 AM

Answers

  • Select the correct MA
    Within the MA search the connector space for the object (the disconnector!) that you want to join
    Select the object
    Click the PREVIEW button
    You can now choose between GENERATE PREVIEW and COMMIT PREVIEW
    GENERATE PREVIEW �??> will show you what would happen, but it will not commit
    COMMIT PREVIEW �??> will show you what has happened as it has been committed
     
    First do GENERATE PREVIEW to get an idea what the end result could be
     
    Only do a COMMIT PREVIEW when you are sure the object will join up to the correct MV object
     
    for this to work both correct join rules must exist and the data on the object must also be correct
     

    Cheers,


    (HOPEFULLY THIS INFORMATION HELPS YOU!)
    Jorge de Almeida Pinto | MVP Identity & Access - Directory Services

    -------------------------------------------------------------------------------------------------------
    * This posting is provided "AS IS" with no warranties and confers no rights!
    * Always evaluate/test yourself before using/implementing this!
    * DISCLAIMER:
    http://jorgequestforknowledge.wordpress.com/disclaimer/
    -------------------------------------------------------------------------------------------------------
    ################# Jorge's Quest For Knowledge ###############
    ###### BLOG URL:
    http://JorgeQuestForKnowledge.wordpress.com/ #####
    #### RSS Feed URL:
    http://jorgequestforknowledge.wordpress.com/feed/ ####
    -------------------------------------------------------------------------------------------------------
    <>

    "HemantC14483" wrote in message news:0d99acec-b26b-4ad9-a97c-badaca51895c@communitybridge.codeplex.com...

    Thanks for the updates.

    I have never done this so I just want to be careful doing this.

    Can you please guide or provide me the steps to follow to achive this properly?


    Jorge de Almeida Pinto [MVP-DS] | Principal Consultant | BLOG: http://jorgequestforknowledge.wordpress.com/
    Tuesday, January 8, 2013 8:54 AM

All replies

  • You can manually join the object via the Joiner tool in the synchronization manager.

    Need realtime FIM synchronization and advanced reporting? check out the new http://www.imsequencer.com that supports FIM 2010, Omada Identity Manager, SQL, File, AD or Powershell real time synchronization!

    Monday, January 7, 2013 10:10 AM
  • that�??s true....remember though, when you manually join an object it becomes an explicit connector and in that case some rules will not be applied anymore (e.g. disconnector filter, etc.)
     
    when possible it is better to select the disconnector object in the corresponding CS, do a preview to see what would have happened and if satisfying (joining to the correct MV object), you could commit the preview. In THIS case it becomes a normal connector.
     

    Cheers,


    (HOPEFULLY THIS INFORMATION HELPS YOU!)
    Jorge de Almeida Pinto | MVP Identity & Access - Directory Services

    -------------------------------------------------------------------------------------------------------
    * This posting is provided "AS IS" with no warranties and confers no rights!
    * Always evaluate/test yourself before using/implementing this!
    * DISCLAIMER:
    http://jorgequestforknowledge.wordpress.com/disclaimer/
    -------------------------------------------------------------------------------------------------------
    ################# Jorge's Quest For Knowledge ###############
    ###### BLOG URL:
    http://JorgeQuestForKnowledge.wordpress.com/ #####
    #### RSS Feed URL:
    http://jorgequestforknowledge.wordpress.com/feed/ ####
    -------------------------------------------------------------------------------------------------------
    <>

    "Paul Wijntjes" wrote in message news:25283edc-a1fd-4671-9242-2b7a79af51ac@communitybridge.codeplex.com...
    You can manually join the object via the Joiner tool in the synchronization manager.

    Need realtime FIM synchronization and advanced reporting? check out the new http://www.imsequencer.com that supports FIM 2010, Omada Identity Manager, SQL, File, AD or Powershell real time synchronization!


    Jorge de Almeida Pinto [MVP-DS] | Principal Consultant | BLOG: http://jorgequestforknowledge.wordpress.com/
    Monday, January 7, 2013 12:23 PM
  • Thanks for the updates.

    I have never done this so I just want to be careful doing this.

    Can you please guide or provide me the steps to follow to achive this properly?

    Monday, January 7, 2013 3:47 PM
  • Select the correct MA
    Within the MA search the connector space for the object (the disconnector!) that you want to join
    Select the object
    Click the PREVIEW button
    You can now choose between GENERATE PREVIEW and COMMIT PREVIEW
    GENERATE PREVIEW �??> will show you what would happen, but it will not commit
    COMMIT PREVIEW �??> will show you what has happened as it has been committed
     
    First do GENERATE PREVIEW to get an idea what the end result could be
     
    Only do a COMMIT PREVIEW when you are sure the object will join up to the correct MV object
     
    for this to work both correct join rules must exist and the data on the object must also be correct
     

    Cheers,


    (HOPEFULLY THIS INFORMATION HELPS YOU!)
    Jorge de Almeida Pinto | MVP Identity & Access - Directory Services

    -------------------------------------------------------------------------------------------------------
    * This posting is provided "AS IS" with no warranties and confers no rights!
    * Always evaluate/test yourself before using/implementing this!
    * DISCLAIMER:
    http://jorgequestforknowledge.wordpress.com/disclaimer/
    -------------------------------------------------------------------------------------------------------
    ################# Jorge's Quest For Knowledge ###############
    ###### BLOG URL:
    http://JorgeQuestForKnowledge.wordpress.com/ #####
    #### RSS Feed URL:
    http://jorgequestforknowledge.wordpress.com/feed/ ####
    -------------------------------------------------------------------------------------------------------
    <>

    "HemantC14483" wrote in message news:0d99acec-b26b-4ad9-a97c-badaca51895c@communitybridge.codeplex.com...

    Thanks for the updates.

    I have never done this so I just want to be careful doing this.

    Can you please guide or provide me the steps to follow to achive this properly?


    Jorge de Almeida Pinto [MVP-DS] | Principal Consultant | BLOG: http://jorgequestforknowledge.wordpress.com/
    Tuesday, January 8, 2013 8:54 AM