Disconnect object using a script (not from FIM Management console)

Hi,

Is there any way to disconnect a connector from its connected Metaverse object using a PowerShell command or wathever?

For the moment we use the Management Console to achieve this operation by clicking on "disconnect" to force the connector to become "disconnector". 

Thanks for your help.

March 20th, 2015 7:33am

Hello,

not directly, and thats also not the way the System is designed for.

Manual disconnect thru GUI is for debug purposes or testing only, but should not be the normal way to diconnect objects, you should Setup approp rules and design so that disconnecting takes place when you want.

There are a lot of ways to Archive this by design:

- MV deletion rules

- Deprovision/Disconnect thru Extension code and Portal sync rules.

beside that, I see no other way.

-Peter

Free Windows Admin Tool Kit Click here and download it now
March 20th, 2015 7:46am

Thank you for your reply,

The deprovisioning process works fine and is not the purpose of what I want to achieve.

What I want to do is to disconnect an Connector from a MV object to reconnect it to another MV object because the join rule isn't valid anymore.

The case is as follow : 

An Active Directory user is linked to an identity in our Identity Management System using a UserID which is mapped to employeeId attribute in AD user.

If the employeeID in AD is modified (by another Management Agent for example), I want to connect the user, with the new employeeID, to the correct MV object and hence to the correct ID in our system.

The main idea is to store some information from AD user such as UserPrincipaleName or sAMAccountName in the correct identity.

Unfortunately, the join rule isn't evaluated for the "connected" Connectors but only for "disconnectors" (unless there is an option to re evaluate the join rules for all objects that I don't know). 

So to connect the user to the correct MV object, I have to disconnect manually the Connector to make it disconnector and re-sync. The sync process connect automatically the user to the correct MV Object which provision attributes from AD user to the right ID and "delete" attributes from the former ID in our system.

Thanks for your help.


March 20th, 2015 8:46am

Hi Eric,

If you are sure about your join rules, I would recommend deleting connector space, disable provisioning in options and run Full Import and Full Synchronization on this MA. Then re-enable provisioning.

It would be the easiest way as objects would not be deleted - only removed from connector space. Then you would have "fresh objects" there (not connected) so join rules would work on them.

Free Windows Admin Tool Kit Click here and download it now
March 21st, 2015 12:11pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics