I would like to export some basic users data to a connected system (an Oracle database). The attribute flow that I would like to use is very simple - I just need to copy some attributes from the MV to a table - so I was wondering if it's possible to do this without configuring an outbound synchronization rule, a workflow and a management policy rule, but just with the "configure attribute flow" tab of the agent properties. Is it possible to do this? If so, there is some documentation I could refer to? Thanks, PaoloPaolo Tedesco - http://cern.ch/idm

Well the ILM Service Synchronization is like ILM 2007.You can set your attribute flow directly on at the creation of the MA as it is in the documentation of ILM 2007.

Yes, you can.Non-declarative attribute flow rules work next to the declarative versions.Please see this.Cheers,MarkusMarkus Vilcinskas, Knowledge Engineer, Microsoft Corporation

Is it necessary to write some custom code to use non-declarative provisioning, even if I just want some direct attributes export with no further processing? Is there any advantage in non-declarative provisioning? Thanks, PaoloPaolo Tedesco - http://cern.ch/idm

You only need to write extension code if direct mappings don't do what you need to do.For example, if you need to calculate the actual value or do some sort of data transformation.Advantage - this is a tough one.We could start an esoteric discussion on this - or I can just say "no" :o)I think, the answer is somewhere in the middle.The way I would put it is - if possible, use declarative provisioning.If there is something, you can't do with declarative provisioning, use the non-declarative counterpart.So, I would tie the answer to a limitation in "FIM declarative provisioning V1" - if that makes sense....How about opening a "Suggestion Box" post and collecting these questions?Something like "About the relationship between declarative and non-declartive synchronization rules" - just a thought...That way, I would know, what I need to write about :-)Cheers,MarkusMarkus Vilcinskas, Knowledge Engineer, Microsoft Corporation

Hi Markus, the suggestion box item is definitely a good idea: relationship between declarative and non-declartive provisioning . Apart from the attribute flow, what else should I configure, provided that direct mappings are all I need? Right now if I try a full synchronization no object is imported from the MV to the CS... Thanks, PaoloPaolo Tedesco - http://cern.ch/idm

if you want object to be synchronize to your Oracle table, you must join tese object to the MV entries.For exemple, you can join your table based on the employeeID if the MV entries attribute containe it and alos if it is contain in your oracle table.Just set the join rules of your oracle MA.Check the ILM 2007 for more information here :http://technet.microsoft.com/en-us/library/cc626295.aspx

Hi Paolo,It's unclear whether you already have records within the Oracle table. If you need FIM to add records to the table so that you can copy the attributes over, you will have to write some provisioning logic to create CSObjects in the Oracle MA's connector space. Those objects would then be exported out to Oracle table. You can have a look at Synchronizing Active Directory Objects to SQL Server for an example of provisioning to a database, using non-declarative provisioining.If you already have records in the Oracle table, you will need to import them into the Oracle MA's connector space and join them to their corresponding Metaverse object, based on some unique attribute (or unique set of attributes), as mentioned by Michael.Cheers,Marc Marc Mac Donell, ILM MVP, VP Identity and Access Solutions, Avaleris Inc.