Identity Broker Forum

Welcome to the community forum for Identity Broker.

Browse the knowledge base, ask questions directly to the product group, or leverage the community to get answers. Leave ideas for new features and vote for the features or bug fixes you want most.

0
Fixed

Handling of ModifyAnchor when the Identity Broker ID is being provisioned

Matthew Clark 12 years ago updated by anonymous 8 years ago 6

The following error was thrown when attempting to provision a new user to the SharePoint Org Profile connector (which is not a ModifyAnchor connector, see IDBSP-44):

System.ServiceModel.FaultException`1System.ServiceModel.ExceptionDetail: Object reference not set to an instance of an object. (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is:
System.NullReferenceException: Object reference not set to an instance of an object.
at Unify.Notification.TaskNotifier`1.Dispose()
at Unify.Framework.EventNotifierModifyAnchorConnectorDecorator.ModifyAnchor(MultiKeyValue oldKey, MultiKeyValue newKey)
at Unify.Framework.Adapter.<>c_DisplayClass34.<CheckAnchorChangeOnSave>b_2f(KeyValuePair`2 keyValue)
at Unify.Framework.Visitor.<>c_DisplayClass1`1.<Visit>b_0(T item, Int32 index)
at Unify.Framework.Visitor.VisitT(IEnumerable`1 visitCollection, Action`2 visitor)
at Unify.Framework.Visitor.VisitT(IEnumerable`1 visitCollection, Action`1 visitor)
at Unify.Framework.Adapter.CheckAnchorChangeOnSave(IEntitySchema connectorSchema, IEnumerable`1 entitiesToSave, IEntityPartitionUpdatableContext connectorContext, IEnumerable`1 entityIds)
at Unify.Framework.Adapter.SaveEntities(IEnumerable`1 entities, Boolean reflect)
at Unify.Framework.A...).

This was resolved by removing the creation of the Identity Broker ID from the provisioning logic, however, there may be solutions where this is a design requirement where no other uniqueness can be guaranteed at provision time. Regarding the above, the entity was being added, so no modify behaviour should be taking place. This behaviour either needs to be corrected, or a better error message put in its place (if there is a legitimate reason a modify operation is being attempted and failing with a null reference).

0
Fixed

Management Studio "connector circles" remain green after certain errors.

Patrick Johannessen 13 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 7

When certain errors occur within an Identity Broker for Aurion connector, the Management Studio circles continue to spin green instead of correctly turning red.

0
Fixed

Exporting or saving entities CONTACT_PHONE failed for Identity Broker for Aurion - Error: pecified item CONTACT_PHONE does not exist for function QUERY_TO_XML

Shane Lim 13 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 2

Configurating Identity Broker for Aurion write "ContactPhoneNo" back to Aurion system in Identity Broker configuration.
The configuration should be correct as there are times that I can perform update into Aurion system and other times I cannot.

Performed the following are the observation at various point of data flow:

1. In Aurion HR system the ContactPhoneNo = (09) 622 1123
2. Projected into Metaverse telephoneNumber = (09) 622 1123
3. Provisioned into AD MA cs telephoneNumber = (09) 622 1123
4. Exported to AD endpoint
5. Modified in AD endpoint telephoneNumber = (01) 111 1111 - change made in AD to flow back to Aurion
6. Imported into AD MA cs telephoneNumber = (01) 111 1111
7. Did a Full Sync
8. Updated Aurion MA cs ContactPhoneNo = (01) 111 1111
9. Exported Aurion MA
10. In IdB's Adapter entity search = ContactPhoneNo = (01) 111 1111
11. In IdB's Connector entity search = ContactPhoneNo = (01) 111 1111 - changed reflected in Identity Connector entity search as expected
12. In Aurion HR system Contact_Phone_Number = (09) 622 1123 - change did not update in Aurion system. In correct result

After several tried with failure the following error is found in the Identity Broker log file:

20101026,11:27:29,Save entities to connector failed.,Connector,Warning,"Save entities Count:1 to connector Aurion Person failed with reason Aurion API error -1: Specified item CONTACT_PHONE does not exist for function QUERY_TO_XML. Duration: 00:00:01.0585937
Error details:
Unify.Communicators.AurionApiCommunicatorException: Aurion API error -1: Specified item CONTACT_PHONE does not exist for function QUERY_TO_XML
at Unify.Communicators.AurionWebServiceApiCommunicator.RaiseExceptionOnErrorCondition(Decimal pStatus, String pMessage)
at Unify.Communicators.AurionWebServiceApiCommunicator.SetValue(String item, String value)
at Unify.Communicators.AurionApiFunctionBase.SetStringValue(String item, String value)
at Unify.Communicators.EmpUpdatePersAurionApiFunction.SetFunctionValues()
at Unify.Communicators.AurionApiFunctionBase.RunFunction()
at Unify.Communicators.AurionCommunicator.SaveEmployee(IAurionEmployee employee)
.
.
.

It could be that while Identity Broker is performing "getAllEntities" and I run "Export" profile in FIM may created a conflict or confusion with the Aurion API.

Here is Shane Day's thought on this error:

I've had another thought about this - the Aurion API only allows one concurrent transaction, therefore if you are attempting two transactions (a query, and an update) at once, the API gets confused. That's the source of that error.

I'm going to suggest that we put a mutex around operations with one Aurion instance to prevent this situation from occurring. It already cannot happen by two query requests as the connectors are all in the same connector group.

0
Fixed

Import fails on CSV connectors when no entities exist in the connector

Patrick Johannessen 13 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 4

Full imports fail on CSV connectors when there are no existing entities in the connector.

0
Completed

The CSV connectors should be upgraded with support for MultiKeyValue

Patrick Johannessen 13 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 3

Currently, the CSV connectors in Identity Broker for Aurion are single-keyed connectors of type StringValue.

As there is a small chance that the usage of these connectors at the Department of Finance will require composite keys, the connectors should be upgraded to support this possibility.

0
Answered

Need to be able to specify a proxy

Peter Wass 13 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 15

In order to be able to contact Aurion in a hosted environment, the Connector needs to be able to specify a proxy. If this is not possible in a short time frame, let me know asap and I'll see if we can resolve it by bypassing the proxy. This invovles IT Security so may be a show stopper.

This currently effects: Broadband (Due: 30/6)
Will effect: ACMA / TGA

0
Fixed

IdB4: CSV Connector schema - cannot specify key

Peter Wass 12 years ago in CSV connector updated by anonymous 8 years ago 12

When specifying the schema for a CSV file, you cannot change what is the required / readonly fields to generate keys. The CSV file format is not always controllable as it can be system produced. Can you please allow the modification of the schema settings.


Incorrec time error.jpg
schemachanges.png
startwithschema.png
0
Completed

Allow for more writeable fields in connectors

Patrick Johannessen 13 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 1

Identity Broker for Aurion currently supports only a few writeable fields, including phone numbers and email address. The list of allowable attributes should be expanded to include as many as possible - at the very least, all fields supported by the EMP_UPDATE_PERS function.

0
Answered

Aurion Security User EXTERNAL_MAIL_TYPE

Peter Wass 13 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 6

Can you confirm the config for setting the external_mail_type in the Aurion Security User. The API guide has:
1=MAPI,2=VIM,3=MHS,5=Compuserve,9=Active Messaging,10=SMTP/POP,11=Notes,20=VINES

Do I need to send 10 or are there translations in the Connector to take SMTP?

Thanks

Peter

0
Fixed

Ensure manager field in AD can be removed

Patrick Johannessen 10 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 1

Fairly niche scenario, but if someone gets promoted to the top level of an organization their manager field in AD is not cleared. This is probably a combination of both the script and the AD connector not correctly clearing fields, but could be looked at if we catch up on everything else.