Microsoft Identity Manager

SQL Always On Availability Groups for MIM

April 26, 2022

Image from: https://learn.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/availability-group-overview Edited July 2 2022 after reviewing my Facebook discussion with Eugene Sergeev on Microsoft’s product team. MIM 2016 SP2 (and 4.4.1459.0 or later supports SQL Server Always On Availability Groups (AG))! Yeah! Ok let’s implement it! But wait! It won’t give us all we hope for! Up to the moment distributed backup of the data – yes! Automatic instant failover – not without a huge caveat! What do you mean it won’t give us Automatic Instant Failover?

MIM Portal Groups whose displayedOwner isn't among the Owners

October 30, 2019

In the MIM Portal it will create issues if you have a group whose displayedOwner isn’t among the objects in the multivalued reference attribute Owner. Querying this through XPath is just about impossible so here is the SQL query to do it. SET TRANSACTION ISOLATION LEVEL READ UNCOMMITTED GO USE FIMService GO SELECT DOwn.* FROM ( SELECT groupObjID = G.[objectID] , GroupDisplayName = GAOVS.ValueString , userDisplayName= UAOVS.ValueString

Is MIM dead? Not yet!

March 29, 2017

From time to time I hear people wonder if MIM is dead. Why do people ask? They don’t feel like they have heard a good road map recently They aren’t seeing the improvements they hoped for They aren’t paying attention to the actions of the product group Why do I say it isn’t dead yet? While the Cloud Identity is the future, we are and will be in hybrid identity for a long time and MIM is Microsoft’s key component to that.

Christmastime FIM/MIM Open Source WF Reviews

December 24, 2016

Over the years since FIM was first beta’d as ILM2 we have seen some cool workflows be released to open source. This is my review of the workflows I can find that are open source. First let me salute everyone who has contributed to the FIM and MIM community with these big undertakings. That said I am trying to give guidance to my readers as to what is the most useful in various situations and so I will make specific recommendations.

MIM 2016 SP1 -- Implications

October 19, 2016

Earlier this month Microsoft released MIM 2016 SP1 But what does this mean for you? Biggest Implications Exchange Online (Office365) for the MIM Service without losing the ability to approve requests from within Outlook, and the requesting of groups within Outlook. Since lots of orgs are using Office 365 no more embarrassing conversations about these great features you can’t have. Support for other browsers for MIM Portal

Post Migration Your MIM/FIM Attribute Flow Precedence is Incorrect

October 17, 2016

Have you ever found out that attribute flow precedence is messed up, wrong or otherwise in error just after you followed the steps to migrate your MIM/FIM configuration from Dev to Prod or vice-versa? Well I am finally blogging about a discovery I made. The list of steps (reproduced below from the above link) are incomplete: Back up the pilot and production environments by using the Backup and Restore procedures.

Check your inputs -- Save your job!

February 6, 2016

At various times in my 10 years of Identity Management Consulting and 25 years working in the IT industry I have been asked to clean up various messes generated by those before me. Some of those messes involved disk failure or other issues that couldn’t be completely prevented. But some involved automated process that didn’t check their inputs. If garbage into a computer gives you garbage out, then garbage into an automated process that doesn’t check its inputs gives you a meltdown!

FIM Custom Expressions inside Custom Expressions?

November 9, 2015

Recently, I needed to take Longitude and Latitude data that was given to me in the following format and break it into its individual components and then flow it out to AD. Let’s suppose the data looks like this: “Point -10.1223 45.945” I could just use the Left and Right functions to get out the Longitude and Latitude. The problem was it could also look like this depending on the level of precision:

How many attributes can you have in the Metaverse?

August 5, 2015

Back in 2013 I published 5 posts about the Secrets of the Metaverse: Parts 1-5: What is the Metaverse? How is the Metaverse data stored? Is there a limit to how many Metaverse attributes I can have? Has access to the metaverse gotten faster with recent releases? How do I safely query the metaverse? Added (Aug 5 2015): How Many Metaverse Attributes can I have? The third post was about how many attributes you can have in the Metaverse in which I said that the mms_metaverse_lineageguid table limits us to 502 single valued non-reference attributes in the Metaverse.

MIM 2016 is now available

August 4, 2015

MIM 2016 is now available MIM – Microsoft Identity Manager 2016 builds on and replaces Microsoft’s Forefront Identity Manager 2010 R2. On Microsoft’s site they include an introductory (2 min) video about Hybrid Identity but don’t mistake that for the MIM UI. So has anything been removed? No. While the list of deprecated features are still deprecated none of them have been removed from this new version. So what’s new?

SQL Always On Availability Groups for MIM

MIM Portal Groups whose displayedOwner isn't among the Owners

Is MIM dead? Not yet!

Christmastime FIM/MIM Open Source WF Reviews

MIM 2016 SP1 -- Implications

Post Migration Your MIM/FIM Attribute Flow Precedence is Incorrect

Check your inputs -- Save your job!

FIM Custom Expressions inside Custom Expressions?

How many attributes can you have in the Metaverse?

MIM 2016 is now available

Search

Categories

Tags