When a MPR is trigger ?
Hi Everyone
I have a FIM deploy on 3 server and 4 systems connected to it. I'm able to provisioning all the systems without troubles.
The provisioning of the user is based on the follow attrbutes that came from HR these attribute are:
Baja1, Baja2; if these two attributes came from HR with 4000 FIM send "Active" to UserStatus attribute in the MV or "Inactive" in the case of both dates are not 4000.
AD, CRM, META4, Mail: these attriutes are boolean and they indicate to FIM that the user must have an account in the system.
So far I'm able to do this in the first Sync form HR, but whe I start to test making changes on my HR system I dont get the right results: I add my testing tables with the AD system.
Based on Baja1 and Baja2 Attributes
First Test (Firs Sync to FIM from HR)
User
Puesto_AD
Baja1
Baja2
Results
User Status (MV and PORTAL)
Real
Expected
1
True
4000
4000
Provisioning to FIM and AD
Provisioning to FIM and AD
Active
2
True
2010
2010
Only provisioning to FIM
Only provisioning to FIM
Inactive
Second Test (I made updates in HR)
User
Puesto_AD
Baja1
Baja2
Results
User Status (MV and PORTAL)
Real
Expected
1
True
2010
2010
Disable from AD
Disable from AD
inactive
2
True
4000
4000
No OUT Flow to AD
Provisioning to AD
active
Third Test (I made more updates in HR)
User
Puesto_AD
Baja1
Baja2
Results
User Status (MV and PORTAL)
Real
Expected
1
True
4000
4000
Enable from AD
Enable from AD
active
2
True
2010
2010
Disable from AD
Disable from AD
inactive
September 30th, 2010 8:48pm
Part2
Based on Puesto_AD
in combination with Baja1 and Baja2 Attributes
First Test (Firs Sync to FIM from HR)
User
Puesto_AD
Baja1
Baja2
Results
User Status (MV and PORTAL)
Real
Expected
1
False
4000
4000
Provisioning to FIM
Provisioning to FIM
Active
2
False
2010
2010
Provisioning to FIM
Provisioning to FIM
Inactive
Second Test (I made updates in HR)
User
Puesto_AD
Baja1
Baja2
Results
User Status (MV and PORTAL)
Real
Expected
1
True
4000
4000
No OUT Flow to AD
Provisioning to AD
active
2
True
2010
2010
No OUT Flow to AD
No OUT Flow to AD
inactive
Third
Test (I made more updates in HR)
User
Puesto_AD
Baja1
Baja2
Results
User Status (MV and PORTAL)
Real
Expected
1
False
4000
4000
No OUT Flow to AD
Disable from AD
active
2
True
2010
2010
No OUT Flow to AD
Disable from AD
inactive
I dont know if I'm doing Run My MPR's, WF and Set, I dont know when they are call and trigger to pull the info into the right systems.
Thanks in advance
Free Windows Admin Tool Kit Click here and download it now
September 30th, 2010 8:48pm
Kichitan,
I could try to write a summary of 20 lines in 10 minutes, but that wouldn't probably be understandble at all.
I really suggest you read:
http://technet.microsoft.com/en-us/library/ff356871(WS.10).aspx
It's an excellent guide to understand all MPR related subjects, translated into understandable examples. Read it! You'll be glad you did.
If you get that right, and still need information you can post back here, or just click round in the Forefront Identity Manager 2010 section over there at technet. MS Doc team really did a great job on them.
Good luck,
Regards,
Thomas
http://setspn.blogspot.com
September 30th, 2010 9:59pm