Quantcast
Channel: Forum Microsoft Identity Manager
Viewing all 6944 articles
Browse latest View live

Skype Management Agent

$
0
0

Hi,

There are MAs for Skype On Premise (latest version) and Skype Online?

Thank you,


MIMWAL generate unique ID

$
0
0

Hello,

We already installed MIMWAL in our environment and we are configure the generate unique ID workflow to avoid the mailnicknames conflict in our active directory.

By the end of the below link we are following they are asking to create a MPR to trigger the workflow:

https://blogs.msdn.microsoft.com/connector_space/2016/02/19/wal-workflow-example-generate-unique-value/

Can you please advise about the following:

How to configure the MPR, currently I am configuring a MPR with transition set in Type and the set created includes all active people with a criteria created one day ago.

I can see the my new user projected from SQL database into the metaverse and is showing in the set created but the mailnickname is not created.

Any advise if am doing anything wrong.

Before MIMWAL i was importing the mailnickname from the SQL database into the metaverse using the normal declarative method the inbound synchronization rule.

Now shall the workflow will take care of that, is there any additional configuration shall I do?

Thanks

NAjwan.

MIM Portal and ObjectSID

$
0
0

Hi,

In the MIM MA, I am able to map and export a user's ObjectSID...the MIM Service schema, in the MA, shows that there is an ObjectSID attribute for the Person object class.

However, when I open a user in the MIM Portal, I am unable to find the 'ObjectSID' attribute - should one be able to see it in the MIM Portal UI?

Thanks,

SK


MIM 2016 PAM Justification resaon

$
0
0

Hi

i looking for where i can read out the Justification resaons for a PAM requests to external SIEM soulution.

Regards 

Anders Berg

MIM and Skype 2016

$
0
0

Hi

Im currently using this https://github.com/Microsoft/MIMPowerShellConnectors for setting up my skype accounts, but I have some problems with hangs and sync times with it, som may be related to that we have all accounts left in AD and this script does not remove acccounts without makeing a own extension. The good thing with this script is that it enables me to set every detail for skype on the account, which I need.

I ownder if its worth the time and effort to troubleshoot this script or if there is any alternative scripts or WAL that I should consider using to set Skype up?

Regards

Jimmy

How to encrypt password from MIM to OpenLdap

$
0
0

Hello,

I'm currently synchronizing password from AD to an OpenLdap Database using PCNS.

The issue is that synched users have their password in plain text on the ldap.

But, on the users that don't have their password synched, the attribute isn't plain text.



I'm looking for a solution to encrypt password sent to the Ldap in order to solve this issue.

Microsoft Identity Manager right for mobile phone

$
0
0

must give a group of employees (members of a particular AD group) the right to edit the mobile phones of all company employees on the MIM portal. Editing other fields is prohibited. What is the top-level scheme for the implementation of this task by means of MIM.

Windows 2016


C уважением к Вам, Я


MIM 2016 SP1 ignoring sendAsAddress email

$
0
0

Hello,

I am using MIM 2016 SP1. I am trying to send emails as a different account. From my reading on other posts on this forum, I should be able to change sendAsAddress attribute in the service.exe.config file. I followed the steps in https://social.technet.microsoft.com/Forums/en-US/aec634d2-165e-49c9-960e-0eaa6625b040/can-mail-server-be-configure-in-fim-post-install?forum=ilm2

I restarted the FIM service in services 

But it seems that MIM is ignoring the email address and still sends the email using the MIM Service email account.

I tried entering an invalid value (e.g. "aadddf"). I saw an error in the event viewer that the email format is not valid.

My conclusion, MIM is validating the email address in the sendAsAddress  attribute but it is not using it when it is valid.

Any idea what's going on?

Thanks


Ahmed is an independent consultant in Ottawa, Canada specialized in .NET, Biztalk, WCF, WPF, TFS and other Microsoft technologies.

Blog: http://lajak.wordpress.com

Twitter: ahmedalasaad


Update to Group membership denied trying to modify E-mail Alias/MailNickname

$
0
0

I'm new to an existing MIM 2016 environment (and FIM in general) and trying to track down an issue we've been experiencing. In the Portal, group owners are attempting to modify membership which is being denied.

Reason: The operation failed as a result of insufficient access rights.
Attributes: MailNickname
Details: No policy grants the Requestor permission to complete all changes.

If the owner is removed and re-added, they are then able to successfully modify the group membership for some short period of time (less than 24 hours). When these requests are processed, there is no mention of E-mail Alias/MailNickname being modified.

In each case, the Request appears to be using the same MPRs so I'm confused as to why it's trying to modify the E-mail Alias in one situation and not the other.

Thanks
Brett

EDIT: There also appears to be a difference if the user opens the group and modifies the membership there (fails) rather than just selecting the group and then clicking Add Member or Remove Member buttons from the toolbar (succeeds).

ECMA2 Export issue

$
0
0

MIM 2016 SP1, 4.4.1642.0 (also tested on 4.4.1749.0)

I have developed an ECMA2 connector to interface with a data source via a REST API, in order to update a small number of attributes; there is no provisioning to the data source. The connector exports changes successfully, but does not report failures to the UI. In order to force an error at the UI, I amended the PutExportEntries() method as shown below, to always return a failure, however, no failure appears in the UI, the UI just looks like the export completed successfully. Can anyone provide any guidance as to what might be amiss?

In addition, I am seeing event 6309 in the Application log with the following text:

The server encountered an unexpected error while performing an operation for a management agent.
 
 "Object reference not set to an instance of an object.

   at Microsoft.MetadirectoryServices.Impl.ScriptHost.InvokeExtMA_ExportEntries(UInt32* rgomodt, UInt32* rgcpcszChangedAttributes, UInt16*** prgpcszChangedAttributes, _GUID* rgguidEntry, _OCTET* rgoctCSImage, _OCTET* rgoctChanges, Int32* rgErrorCodes, UInt16** rgpszErrorName, UInt16** rgpszErrorDetail, UInt32 cBatchSize, UInt32 dwFlagsCapabilities, _OCTET* rgoctConfirmingImportDeltaImages, Int32 passThru)


InnerException=>
none
"

PutExportEntries method:

public PutExportEntriesResults PutExportEntries(IList<CSEntryChange> csentries)
        {
            log("PutExportEntries-Start");

            PutExportEntriesResults exportEntriesResults = new PutExportEntriesResults();

            foreach (CSEntryChange csentry in csentries)
            {
                // Force an error to the UI
                exportEntriesResults.CSEntryChangeResults.Add(CSEntryChangeResult.Create(csentry.Identifier
                    , csentry.AttributeChanges
                    , MAExportError.ExportErrorCustomContinueRun
                    , "custom-error"
                    , "Custom error message."));
                continue;

                //rest of export code below but unreachable

            }
            log("PutExportEntries-End");
            return exportEntriesResults;
}


Update from MIM 2010 SP1 4.4.1237.0 to 4.4.1302.0

$
0
0

Hi Guys,

I have a situation at a customer. We have been using MIM2010SP1 since the early release of version 4.4.1237.0.

We would like to install MIM Reporting and unfortunatly we run into a bug that has been corrected in version 4.4.1459.0

Unfortunatly it seems that we are unable to upgrade to this version because the version 4.4.1237.0 is outdated. Microsoft asks us to uninstall this version and install the version MIM2016 RTM and to upgrade to version 4.4.1302.0. For the customer this is unacceptabel to uninstall the version 4.4.1237.0 because it is in production and actively used (Synch, Portal, SSPR, group management,...)

I would like to knwo if there is a way to install the version 4.4.1302.0 with out having to uninstall this version and if I have to what would the procedure be to do so minimizing the downtime?

Thanks for you help

regards,

Sylvan

MIM 2016 SP1 showing

$
0
0

I've just taken over an operation that what I thought was FIM2010 R2 installation, according to the About screen.  However when I looked up the build number it is for MIM 2016 SP1.   Why is it like this?  Is this from a bad installation/upgrade?  How do I correct this?  Should I be concerned about this - is it a clean MIM2016 SP1 installation?

FIM Service and Portal hotfix KB3171318 installation error.

$
0
0

Hello All,

We are installating hotfix KB3171318 ins our environment. All went good with Synchronization service and we are abel to successfully deployed this hotfix for sync service.

But while deploying the same for FIM service and Portal we are getting below error. Kindly suggest how to resolve this 

"

Product: Forefront Identity Manager Service and Portal - Update 'FIM Service & Portal Hotfix KB 3171318' could not be installed. Error code 1603. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127

Regards,

Suman

Move existing MIM infrastructure to different domain

$
0
0

Dear All,

We have MIM infrastructure mapped with abc.com and now we are planning to migrate our existing infrastructure to def.com 

How it can be achieved?

Need your Help!

Thanks,

Shashidhar


Generic SQL connector not importing all records

$
0
0

 

I’ve set up the Generic SQL connector reading from a couple of views (including one for multi-values). When I run a full import it stops when it reaches the default page size (5000) even though there are around 30,000 objects to import. It doesn’t error.

 

If I make the page size lower it just errors saying too many objects returned (0x80231345 Objects returned on import exceeds page size. Import aborted.) So it seems to be importing 5000 whatever I set the page size too.

 

Has anyone got this running with more than 5,000 objects (in the same partition)? Any ideas on what I may have configured wrong also gratefully received.



MIM 2016 OS & Browser Support

$
0
0

Does MIM 2016 support Windows 10? 

The Microsoft Identity Manager 2016 TechNet page (https://technet.microsoft.com/en-us/library/mt150253.aspx) doesn't mention it as a supported operation system. 

However, this blog posting (http://blogs.technet.com/…/microsoft-identity-manager-2016-…) indicates it does.  I'm looking for an official statement.

Also, in regards to browser support, does the MIM Portal still only support IE, or does it now support Chrome or Microsoft Edge?

Thanks,

Marc


Marc Mac Donell, VP Identity and Access Solutions, Avaleris Inc.
http://www.avaleris.com


Change password using web portal

$
0
0

Hi Guys,

I have been using Forefront identity manager for self-service password reset but now seeking your support to allow users to change their password by providing their current password without any security questions or code.

I am interested to use forefront identity manager but if there is any other way to allow users to change their password then I will also look into that. I have also looked into the third party tools but they are quite expensive if you have more users.

Your help will be highly appreciated.

Regards
NAV


Sarwar

String Field to Reference (DN) field in MIM (Group Owner)

$
0
0

Hi,

I have field in my SQL MA that contains employee ID, I want to map it to reference field (DN) in metaverse. But it doesn't allow me to do so. So how can I do this?

Actually, I am creating security & distribution groups on FIM portal using a SQL MA but I am unable to set group owner's and administrator field. I am trying to flow out administrator's employee id from SQL but since it is a string value so it is not allowing me to assign it to a reference value.

I'll be thankful for the response/solution.

Regards  


F.

Migrating MIM between environments

$
0
0

Hi,

So we would like to migrate our MIM Sync and Service/Portal from 'test' to 'production'.

There is an AD Forest namespace difference between 'test' and 'production'.

We have matched the MIM version number in 'production' to 'test'.

We have exported the MIM Sync server configuration. The import fails, as it complains that the MIM Portal MA is missing custom attributes - yes, that is expected, as we have extended the MIM Service/Portal schema.

So we then proceeded to exporting the MIM Service policy and schema (to the policy.xml and schema.xml files, as per migration guide).

When we try to commit the schema.xml file, it errors and says that many of the required MPRs either do not exist or are not configured correctly, or MPR permissions are missing.

When we try to commit the policy.xml file, it errors and says that many of the required Schema objects/attributes are missing.

So as can been seen, everything has dependencies on each other - how the heck is one meant to migrate a MIM Solution from 'test' to 'production' ????

Cheers,

SK

'Unable to process your request' while searching user with _ in email attribute

$
0
0

Hello FIM forum,

We are experiencing an issue with our FIM deployment. When we try to search a user with _ in email the search runs and then fails with the 'Unable to process your request'

I do not so much about FIM. I am sure if some regex filters are wrong, or what could be checked to address it

Any ideas

Thank you


Liibas

Viewing all 6944 articles
Browse latest View live