Group membership provisioning from FIM to AD
I have setup a FIM lab setup and FIM is provisioning users and groups into AD . FIM successfully created two SG's in AD and in FIM group membership is set to criteria based and i can view the group membership in FIM portal. But my problem is even though group members appear in FIM portal group membership isn't updated in AD.I went through the how do I guide to provision groups to AD but I couldn't find much on it. So any ideas what’s missing here or??? Tks.
October 27th, 2010 5:11am
Make sure you import attribute flow set up for 'member' attribute of groups for FIM MA and export attribute flow for same attribute on AD MA. This way, any changes you make in portal to groups and their members should flow to AD during next sync cycle(import, sync on FIM MA followed by export, import on AD MA).
October 27th, 2010 5:16am
I battled with this same problem for a few days and it ended up being that the reference objects in the group did not exist in AD. Make sure all reference objects in the group member attribute exist in AD. If any of the objects do not exist, the member attribute will not flow over.
February 4th, 2012 9:22am