I am excited to announce that I will be speaking at the Cloud Identity Summit 2017 in Chicago in June.
I will discuss How Identity Management (Employee and Consumer) affects the bottom line.
http://feeds.feedburner.com/IdentityLifecycleManagerilmBestPractices
From time to time I hear people wonder if MIM is dead.
Why do people ask?
Why do I say it isn’t dead yet?
While the Cloud Identity is the future, we are and will be in hybrid identity for a long time and MIM is Microsoft’s key component to that.
Over the years since FIM was first beta’d as ILM2 we have seen some cool workflows be released to open source. This is my review of the workflows I can find that are open source. First let me salute everyone who has contributed to the FIM and MIM community with these big undertakings. That said I am trying to give guidance to my readers as to what is the most useful in various situations and so I will make specific recommendations.
Earlier this month Microsoft released MIM 2016 SP1
But what does this mean for you?
Biggest Implications
Exchange Online (Office365) for the MIM Service
without losing the ability to approve requests from within Outlook, and the requesting of groups within Outlook.
Since lots of orgs are using Office 365 no more embarrassing conversations about these great features you can’t have.
Support for other browsers for MIM Portal
SSPR already supported other browsers but now MIM Portal will support Chrome, Firefox and Safari.
Have you ever found out that attribute flow precedence is messed up, wrong or otherwise in error just after you followed the steps to migrate your MIM/FIM configuration from Dev to Prod or vice-versa? Well I am finally blogging about a discovery I made. The list of steps (reproduced below from the above link) are incomplete:
Back up the pilot and production environments by using the Backup and Restore procedures.
Export the FIM Service schema configuration.
In using the SharePoint MA from Steve Kean I noticed that some of the fields I imported were coming in with some extra noise or crap at the beginning:
String;#164
All I really wanted was the 164. While I can use the Word function in a sync rule to get past it
Word(strAttribute,2,“2”) I really would prefer to bypass it altogether.
Well thanks to Jermaine Snipe I found why this happens and how to bypass it:
These are calculated columns and they use the concatenate function. Instead use a Text formula for the calculated column. This of course supposes that you can get the SharePoint developer to change it.
At various times in my 10 years of Identity Management Consulting and 25 years working in the IT industry I have been asked to clean up various messes generated by those before me. Some of those messes involved disk failure or other issues that couldn’t be completely prevented. But some involved automated process that didn’t check their inputs.
If garbage into a computer gives you garbage out, then garbage into an automated process that doesn’t check its inputs gives you a meltdown! Even Disney’s Sorcerer’s Apprentice Fantasia illustrates what can go wrong with an automated process.
Recently, I needed to take Longitude and Latitude data that was given to me in the following format and break it into its individual components and then flow it out to AD.
Let’s suppose the data looks like this:
“Point -10.1223 45.945”
I could just use the Left and Right functions to get out the Longitude and Latitude.
The problem was it could also look like this depending on the level of precision:
Back in 2013 I published 5 posts about the Secrets of the Metaverse:
Parts 1-5:
The third post was about how many attributes you can have in the Metaverse in which I said that the mms_metaverse_lineageguid table limits us to 502 single valued non-reference attributes in the Metaverse. This is still correct but a client told me of a scenario they encountered where the lineageguid table prevented them from getting to over 450 attributes and they encouraged me to blog about how they solved it.
MIM – Microsoft Identity Manager 2016 builds on and replaces Microsoft’s Forefront Identity Manager 2010 R2.
On Microsoft’s site they include an introductory (2 min) video about Hybrid Identity but don’t mistake that for the MIM UI.
So has anything been removed?
No. While the list of deprecated features are still deprecated none of them have been removed from this new version.
So what’s new?
The first thing to call your attention is the focus on Hybrid (Cloud + On Premise) Identity. MIM can still manage on premise but is now even better equipped to work with Microsoft’s Identity Management pieces in the cloud.
