none
Syncing to AD codeless without portal interaction RRS feed

  • Question

  • Hi,

    I'm looking at implementing FIM 2010 R2 to sync user information from an Oracle DB to AD. I don't want to use classic rules I don't have the experience or knowledge of C to code my own DLLs. My understanding is that to do this using declarative rules, I'd need at least 3 MA and configure them as follows:

    Oracle MA - import, sync & export
    FIM MA - import, sync & export
    AD MA - import, sync & export

    In the above scenario all my Oracle user information would be imported into the FIM portal and exported to AD.

    Is it possible to simplify the above when using declarative sync rules so that I go directly from the Oracle data source to AD, without using the portal?

    Thanks

    J

    Thursday, January 2, 2014 3:15 PM

Answers

  • Yes. Although by having the FIM MA the data will get imported to the FIM Service, but you don't have to schedule

    1. Import from Oracle,
    2. sync Oracle,
    3. Export to FIM,
    4. Import from FIM,
    5. sync FIM,
    6. Export to AD,
    7. Import to AD
    8. Sync AD

    Once you have imported and synced your rules from FIM you can simply run

    1. Import from Oracle,
    2. sync Oracle,
    3. Export to AD,
    4. Import to AD
    5. Sync AD

    You no longer have to wait on the FIM Service


    David Lundell, Get your copy of FIM Best Practices Volume 1 http://blog.ilmbestpractices.com/2010/08/book-is-here-fim-best-practices-volume.html

    • Marked as answer by JDropper80 Friday, January 3, 2014 9:18 AM
    Thursday, January 2, 2014 6:42 PM

All replies

  • I am not certain which of two questions you are asking (so I will answer both):

    1) Can I configure the Declarative Sync Rules without using the Portal

    No. You must use the Portal to configure Declarative Sync Rules

    2) Can I configure the Declarative Sync Rules to synchronize the data from Oracle to AD without requiring the data to go into the FIM Portal first.

    Yes provided that you are using FIM 2010 R2, which introduced Filtered Outbound sync rules (as opposed to ERE based Outbound sync rules that require Sets, Management Policy Rules, and Workflows).  Here is quick article from Blain Checkley on Filtered Outbound Sync Rules, that you might find useful:

    http://identityminded.wordpress.com/2012/10/03/fim-2010-r2diving-into-filtered-outbound-synchronization-rules/


    David Lundell, Get your copy of FIM Best Practices Volume 1 http://blog.ilmbestpractices.com/2010/08/book-is-here-fim-best-practices-volume.html

    Thursday, January 2, 2014 5:35 PM
  • Thanks David, I'm using FIM 2010 R2, so just to confirm I can configure the declarative sync rules in the FIM portal, then use my FIM MA to bring my sync rules into the metaverse, but from that point onwards, if I want to sync between Oracle MA and AD MA, I can simply use run profiles for those two MAs, i.e.:

    Oracle MA - Import and full sync
    AD MA - Delta sync and export

    Thanks

    Ps -  when will your book be available in the UK?

    Thursday, January 2, 2014 6:20 PM
  • Yes. Although by having the FIM MA the data will get imported to the FIM Service, but you don't have to schedule

    1. Import from Oracle,
    2. sync Oracle,
    3. Export to FIM,
    4. Import from FIM,
    5. sync FIM,
    6. Export to AD,
    7. Import to AD
    8. Sync AD

    Once you have imported and synced your rules from FIM you can simply run

    1. Import from Oracle,
    2. sync Oracle,
    3. Export to AD,
    4. Import to AD
    5. Sync AD

    You no longer have to wait on the FIM Service


    David Lundell, Get your copy of FIM Best Practices Volume 1 http://blog.ilmbestpractices.com/2010/08/book-is-here-fim-best-practices-volume.html

    • Marked as answer by JDropper80 Friday, January 3, 2014 9:18 AM
    Thursday, January 2, 2014 6:42 PM
  • My book is available in the UK. Just go to http://www.lulu.com/shop/search.ep?contributorId=737257 and you can get the ebook or print edition.

    David Lundell, Get your copy of FIM Best Practices Volume 1 http://blog.ilmbestpractices.com/2010/08/book-is-here-fim-best-practices-volume.html

    Thursday, January 2, 2014 6:43 PM
  • Check this solution from Soren (FIM MVP) - http://fimmre.codeplex.com/ - maybe it will suite your needs

    Tomek Onyszko, memberOf Predica FIM Team (http://www.predica.pl), IdAM knowledge provider @ http://blog.predica.pl

    Thursday, January 2, 2014 10:29 PM