Identity Broker Forum

Welcome to the community forum for Identity Broker.

Browse the knowledge base, ask questions directly to the product group, or leverage the community to get answers. Leave ideas for new features and vote for the features or bug fixes you want most.

0
Answered

FIM Identity Broker 5.1 RC Management agent errors on Delta Imports

Andrew Silcock 9 years ago in UNIFYBroker/Microsoft Identity Manager updated by anonymous 9 years ago 4

When attempting to run a Delta Import on an IDB MA the MIM UI throws up that the MA has detected that a full import is required.


When running a Delta Import the error below appears in the Windows Event Log. Restarted IDB and attempted a delta import after a full import however the error still persists.


The extensible extension returned an unsupported error.
The stack trace is:

"System.FormatException: Invalid change number: ''
at Unify.Product.IdentityBroker.ImportProxy.DeltaImportPaged(GetImportEntriesRunStep importRunStep)
at Unify.Product.IdentityBroker.ImportProxy.Import(GetImportEntriesRunStep importRunStep)
Forefront Identity Manager 4.3.2124.0"

Answer
anonymous 9 years ago

Issue has now been resolved - appears to have corrected itself after a number of full import runs.

0
Completed

Had to change LDAP IP address in IdB 5.1

Carol Wapshere 9 years ago in UNIFYBroker/Microsoft Identity Manager updated by anonymous 9 years ago 3

IdB 5.1 and FIM Sync are on different servers. The Sync server was unable to contact the IdB server over port 389 (including from telnet). Windows firewalls were not enabled.

The fix was to change the LDAP server address in IdB from 127.0.0.1 to 0.0.0.0.

Answer
anonymous 9 years ago

No not necessarily - just putting it here in case anyone else has this problem.

0
Answered

Filter on NotNull

Carol Wapshere 9 years ago in UNIFYBroker/Microsoft Dynamics CRM updated by anonymous 9 years ago 6

I want to set the connector filter to exclude contacts that don't have an email adress. I have checked this page: https://msdn.microsoft.com/en-us/library/microsoft.xrm.sdk.query.conditionoperator.aspx and there is a filterType "NotNull" however IdB won't let me save "emailaddress1 NotNull". I think it is looking for a value on the other side of the filter, but for this I don't need one.


I tried setting setting "emailaddress1 NotNull Null" and also tried setting fieldValue="" in the Connector XML but for both I get this error in running the Import: "Condition operation 'NotNull' requires that no values are set".


Also tried "emailaddress1 Contains @" but I guess emailaddress1 isn't full-text indexed as I got the SQL error mentioned in the article.

And "emailaddress1 NotEqual Null" was accepted, and imported, but imported everything, irrespective of emailaddress1 having a value or not.

Answer
anonymous 9 years ago

The filter currently assumes that there is a field, type and value, so I'll have a look at what can be done here.

0
Answered

No container imported

Carol Wapshere 9 years ago in UNIFYBroker/Microsoft Identity Manager updated by anonymous 9 years ago 6

IdB 4.1.5. The version number on the FIMEngine dll is 4.0.0.3.

There are no objects in the adapter, however I would still expect a container to be imported into FIM when I run a Full Import. Instead I get no objects, which means I can't provision as I don't have the parent container. How can I get that container object?

The container object type appears in the MA Object Types. The DN template in the adapter is "CN=@IdBID,OU=PRISM_ExternalIdentities".

Answer
anonymous 9 years ago

Hi Carol,


This has been answered here, and fixed here (documentation).


Thanks.

0
Answered

IdB for FIM 5 - the extension could not be loaded

Eddie Kirkman 9 years ago updated by anonymous 9 years ago 2

I have installed FIM adapter 5.0.4.0 (I see a more recent version in the doco but that is the latest under subscribers). When trying to create the MA for IDB5, I can browse for the FIMAdapter.dll, but when I refresh interfaces I get error The extension could not be loaded.


I have looked at http://voice.unifysolutions.net/topics/428-creating-idb-5-ecma2-receive-error-could-not-load-file-or-assembly-microsoftmetadirectoryservicesex/


And tried modifying the new version listed for both mmsscript and miisserver config files, but the error persists.


Any idea what else to try?


Answer
anonymous 9 years ago

Never mind - I found the little note in the doco that tells me what hotfix I need

0
Fixed

Aurion person connector description

Eddie Kirkman 9 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 1

Update Aurion person connector, set a description. The summary reports Comment: a comment has not been provided. Can see no way to get a description added using the UI (have not tried direct in XML). Really really low priority. I may be the only person who has ever tried adding a description ...

Answer
anonymous 9 years ago

Thanks Eddie. This has already been fixed and is just waiting to be released (another issue waiting to be confirmed by a project).

0
Fixed

Aurion Agent timout error

Eddie Kirkman 9 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 5

Setting the Aurion agent timeout. select minute dialogue dropdown and select 5 rather than default 10, the timout field now shows null.00:05:00 and attempting to save advises this is not valid. Have to edit the field to remove the null.

Answer
anonymous 9 years ago

Just confirmed that it's fixed in v5.1. Thanks.

0
Answered

Aurion connector page size

Eddie Kirkman 9 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 1

My Aurion connector to a DEV system has some dirty data in in (duplicate employeeID) and so fails while retrieving the second page of 1000 users. Where is that page size configured? I cannot see anything in the Agent or Connector (through GUI or in XML) but would like to reduce the size so I get more users before we hit the failure

Answer
anonymous 9 years ago

It's not a connector (or Aurion) concept. It's a built-in starting point for paging through the records (and performing change detection on them). The number auto-scales up or down depending on how quickly it performed change detection on the previous page.


From memory, the Aurion query tool can be configured to limit the number of results that are returned.

0
Answered

Aurion QueryID length

Eddie Kirkman 9 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 3

My Aurion QueryID is 16 characters long, but because we are sending a parameter/option with the queryID (i.e. my QueryID field is like: query1234567890a,XML_FILE_PATH=file.xml) I am getting the validation error message.


Import all entities from connector failed.
Import all entities from connector AurionDEVPerson failed with reason QueryId cannot exceed 16 characters
Parameter name: queryId. Duration: 00:02:06.0296668
Error details:
System.ArgumentOutOfRangeException: QueryId cannot exceed 16 characters
Parameter name: queryId
at Unify.Communicators.AurionAgent.QueryToXml(String queryId, String expectedObjectName)
at Unify.Connectors.AurionApiReadingConnector.<GetAllEntities>d__4.MoveNext()
at System.Linq.Enumerable.WhereSelectEnumerableIterator`2.MoveNext()
at Unify.Framework.Collections.ActionOnExceptionEnumerator`1.MoveNext()
at Unify.Framework.Collections.EnumerableExtensions.<ActionOnLast>d__10`1.MoveNext()
at Unify.Framework.Collections.EnumerableExtensions.<ProduceAutoPages>d__7`1.MoveNext()
at Unify.Framework.Visitor.ThreadsafeVisitorEvaluator`1.Visit()
at Unify.Product.IdentityBroker.RepositoryChangeDetectionWorkerBase.PerformChangeDetection(IEnumerable`1 connectorEntities)
at Unify.Product.IdentityBroker.ChangeDetectionImportAllJob.ImportAllChangeProcess()
at Unify.Product.IdentityBroker.ChangeDetectionImportAllJob.RunBase()
at Unify.Framework.DefinedScopeJobAuditTrailJobDecorator.Run()
at Unify.Product.IdentityBroker.ConnectorJobExecutor.<>c__DisplayClass33_0.<Run>b__0()
at Unify.Framework.AsynchronousJobExecutor.PerformJobCallback(Object state)


I see from this

http://voice.unifysolutions.net/topics/326-improve-error-message-when-queryid-exceeds-maximum-length/

that this is desired/expected behaviour, but could we please either only validate that string up to the comma or add a field for any parameters that we want to append?


Answer
anonymous 9 years ago

Just remove the XML_FILE_PATH. It's not required in Identity Broker because it can be handled by the query tool.

0
Completed

Test Use case for 'adding' new phones only to Workday

Jacques Swanepoel 9 years ago in UNIFYBroker/Workday updated by anonymous 9 years ago 1

We need to test this use case given the changes to how we use the contact object

Answer
anonymous 9 years ago

Contact update split up to ensure that changes are 'nursed' into Workday.