if I have three domain:domainadomainBdomainC, how to set? IIF(CustomExpression(Eq(Left(ConvertSidToString(objectSid),41),”sid-xxx-xxx…”)),CustomExpression(“CN=”+accountName+”,OU=domainA,DC=xxx,DC=xxx”), CustomExpression(“CN=”+accountName+”,OU=domainB,DC=xxx,DC=xxx”) = > dnThere is no fate but what we make

You could just do IIF( CustomExpression(Eq(Left(ConvertSidToString(objectSid),41),”sid-xxx-xxx…”)), CustomExpression(“CN=”+accountName+”,OU=domainA,DC=xxx,DC=xxx”), IIF(CustomExpression(Eq(Left(ConvertSidToString(objectSid),xy),”sid-xxx-xxx…”)), CustomExpression(“CN=”+accountName+”,OU=domainB,DC=xxx,DC=xxx), CustomExpression(“CN=”+accountName+”,OU=domainC,DC=xxx,DC=xxx) ) So basically you add an additional IIF. Got the point? Regards, Thomas http://setspn.blogspot.com

You mean: IIF(condition, valueIfTrue, valueIfFalse) condition corresponds to "CustomExpression(Eq(Left(ConvertSidToString(objectSid),41),”sid-xxx-xxx…”))" valueTrue corresponding to "CustomExpression(“CN=”+accountName+”,OU=domainA,DC=xxx,DC=xxx”)" valueFalse correspond to "IIF(CustomExpression(Eq(Left(ConvertSidToString(objectSid),xy),”sid-xxx-xxx…”)),CustomExpression(“CN=”+accountName+”,OU=domainB,DC=xxx,DC=xxx),CustomExpression(“CN=”+accountName+”,OU=domainC,DC=xxx,DC=xxx)"? There is no fate but what we make

Xy is a domain of SSID needs to read bits

Xy is a domain of SSID needs to read bits

How can nest IIF?There is no fate but what we make

How can nest IIF?There is no fate but what we make

Xy is a domain of SSID needs to read bits In your orgininal example you used "41" as to identity "domainA". I assume you can fill in "xy" as to identify "domainB". Assuming two digits are enough to distinguish between all domains. How can nest IIF? As you said: IIF(condition1, valueIfTrue1, valueIfFalse1) You can do: condition1 => determine wheter SID matches to Domain A valueIfTrue1 => dn for Domain A valueIfFalse1 => IIF(condition2, valueIfTrue2, valueIfFalse2) condition2 => determine wheter SID matches to Domain B valueIfTrue2 => dn for Domain B valueIfFalse2 => dn for Domain C So by putting an other IIF statement in "valueIfFalse1" we can nest IIFs. "valueIfFalse" doesn't necesseraly have to be a real attribute, it can just be another function (IIF in this case) which evaluates eventually to an attribute. Hope this helps. Regards, Thomas http://setspn.blogspot.com

I see, Thank you very much! I will be tested.There is no fate but what we make

I see, Thank you very much! I will be tested.There is no fate but what we make

I copy "IIF (condition2, valueIfTrue2, valueIfFalse2)" to valueIfFalse1, when submitted, the following error: The function IIF is not correctly formatted My settings are as follows: Function name->IIF Condition->CustonExpression->Eq(Left(ConvertSidToString(objectSid),41),"S-1-5-21-1534755923-3517799505-1156406754") ValueTrue->CustonExpression->"CN="+accountName+",OU=xxxA,DC=xx,DC=xxxxxx,DC=local" ValueFalse->CustonExpression->IIF(CustomExpression(Eq(Left(ConvertSidToString(objectSid),41),"S-1-5-21-2850928761-3307869213-655172579"))),CustomExpression("CN="+accountName+",OU=xxxB,DC=xx,DC=xxxxxx,DC=local"),CustomExpression("CN="+accountName+",OU=xxxC,DC=xx,DC=xxxxxx,DC=local") There is no fate but what we make

I copy "IIF (condition2, valueIfTrue2, valueIfFalse2)" to valueIfFalse1, when submitted, the following error: The function IIF is not correctly formatted My settings are as follows: Function name->IIF Condition->CustonExpression->Eq(Left(ConvertSidToString(objectSid),41),"S-1-5-21-1534755923-3517799505-1156406754") ValueTrue->CustonExpression->"CN="+accountName+",OU=xxxA,DC=xx,DC=xxxxxx,DC=local" ValueFalse->CustonExpression->IIF(CustomExpression(Eq(Left(ConvertSidToString(objectSid),41),"S-1-5-21-2850928761-3307869213-655172579"))),CustomExpression("CN="+accountName+",OU=xxxB,DC=xx,DC=xxxxxx,DC=local"),CustomExpression("CN="+accountName+",OU=xxxC,DC=xx,DC=xxxxxx,DC=local") There is no fate but what we make

Have you trued Using PowerShell To Generate The Custom Expression For The Domain Attribute Flow yet? Cheers, MarkusMarkus Vilcinskas, Knowledge Engineer, Microsoft Corporation

Have you trued Using PowerShell To Generate The Custom Expression For The Domain Attribute Flow yet? Cheers, MarkusMarkus Vilcinskas, Knowledge Engineer, Microsoft Corporation

I've used the powershell script to generate a SSIDThere is no fate but what we make

I've used the powershell script to generate a SSIDThere is no fate but what we make

Markus, I think your are referencing to a way for flowing the NetBIOS domain name into the Portal: AD -> FIM: function(objectSid) -> Domain What John is trying to achieve: FIM -> AD: function(objectSid) -> dn As pointed out in this other thread: http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/a3a31476-bf02-4a07-bcbe-004db461fd98 I think this will be impossible to achieve. John, Am I right about my findings? If not, can you please copy paste an exact copy paste of what you are entering in the portal? Regards, Thomas http://setspn.blogspot.com

Markus, I think your are referencing to a way for flowing the NetBIOS domain name into the Portal: AD -> FIM: function(objectSid) -> Domain What John is trying to achieve: FIM -> AD: function(objectSid) -> dn As pointed out in this other thread: http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/a3a31476-bf02-4a07-bcbe-004db461fd98 I think this will be impossible to achieve. John, Am I right about my findings? If not, can you please copy paste an exact copy paste of what you are entering in the portal? Regards, Thomas http://setspn.blogspot.com

Dear Thomas, Thank you for your support and help! You mean I can not be achieved this way nested IIF?There is no fate but what we make

Dear Thomas, Thank you for your support and help! You mean I can not be achieved this way nested IIF?There is no fate but what we make