Hi All, I’m currently evaluating FIM 2010 and am in the process of working through the product documentation. So far, I’ve managed to import all the Active Directory Groups and Users that I expected to import but there is a strange problem: when viewed via the FIM Portal, none of the Groups have any members. However, a search of the connector space for the ADMA shows that the correct membership details are synchronising from the Active Directory. A search of the Metaverse suggests that that as far as it gets. Bringing up the Metaverse object properties of a group shows that the “Member” attribute is missing from the Attribute tab; is this expected? It is a selected attribute in both the AD MA and the FIM MA, is included as part the FIM MA Attribute Flow for the Group Object Type as Export and is listed as part of the Inbound Attribute Flow for the SR. Looking at the “Connectors” tab in the Metaverse Object Properties seems to show the same thing; the details for the object in the FIM MA shows no “Member” attribute but the details for the AD MA has it and it’s populated with the correct group memberships… …clearly, there is some sort of flow issue here but I’m not sure where to look. Any suggestions would be greatly appreciated. Cheers, Graeme

Sounds like the FIM MA is precedent for the member flow when you want the AD MA to be precedent. In the Synchronization Manager, click Metaverse Designer, select Person from the available object types, click member in the attributes list and click Configure Attribute Flow Precedence from the actions pane. Modify the precedence accordingly.

Thanks for your reply Paul but the issue was my fault all along… I did some homework last night and re-read the “How do I Synchronize Groups from AD DS…” document. At which point I realised that AD MA mentioned in that document and the AD MA referenced in the “How do Synchronize Users from AD DS…” was actually one and the same; I’d been treating them as two separate AD MAs. I went back into FIM this morning, combined the two, re-run the run profiles and now the members are there… Thanks for your time, Graeme