Identity Broker Forum

Welcome to the community forum for Identity Broker.

Browse the knowledge base, ask questions directly to the product group, or leverage the community to get answers. Leave ideas for new features and vote for the features or bug fixes you want most.

0
Answered

No container imported

Carol Wapshere 9 years ago in UNIFYBroker/Microsoft Identity Manager updated by anonymous 9 years ago 6

IdB 4.1.5. The version number on the FIMEngine dll is 4.0.0.3.

There are no objects in the adapter, however I would still expect a container to be imported into FIM when I run a Full Import. Instead I get no objects, which means I can't provision as I don't have the parent container. How can I get that container object?

The container object type appears in the MA Object Types. The DN template in the adapter is "CN=@IdBID,OU=PRISM_ExternalIdentities".

Answer
anonymous 9 years ago

Hi Carol,


This has been answered here, and fixed here (documentation).


Thanks.

0
Answered

IdB for FIM 5 - the extension could not be loaded

Eddie Kirkman 9 years ago updated by anonymous 9 years ago 2

I have installed FIM adapter 5.0.4.0 (I see a more recent version in the doco but that is the latest under subscribers). When trying to create the MA for IDB5, I can browse for the FIMAdapter.dll, but when I refresh interfaces I get error The extension could not be loaded.


I have looked at http://voice.unifysolutions.net/topics/428-creating-idb-5-ecma2-receive-error-could-not-load-file-or-assembly-microsoftmetadirectoryservicesex/


And tried modifying the new version listed for both mmsscript and miisserver config files, but the error persists.


Any idea what else to try?


Answer
anonymous 9 years ago

Never mind - I found the little note in the doco that tells me what hotfix I need

0
Fixed

Aurion person connector description

Eddie Kirkman 9 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 1

Update Aurion person connector, set a description. The summary reports Comment: a comment has not been provided. Can see no way to get a description added using the UI (have not tried direct in XML). Really really low priority. I may be the only person who has ever tried adding a description ...

Answer
anonymous 9 years ago

Thanks Eddie. This has already been fixed and is just waiting to be released (another issue waiting to be confirmed by a project).

0
Fixed

Aurion Agent timout error

Eddie Kirkman 9 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 5

Setting the Aurion agent timeout. select minute dialogue dropdown and select 5 rather than default 10, the timout field now shows null.00:05:00 and attempting to save advises this is not valid. Have to edit the field to remove the null.

Answer
anonymous 9 years ago

Just confirmed that it's fixed in v5.1. Thanks.

0
Answered

Aurion connector page size

Eddie Kirkman 9 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 1

My Aurion connector to a DEV system has some dirty data in in (duplicate employeeID) and so fails while retrieving the second page of 1000 users. Where is that page size configured? I cannot see anything in the Agent or Connector (through GUI or in XML) but would like to reduce the size so I get more users before we hit the failure

Answer
anonymous 9 years ago

It's not a connector (or Aurion) concept. It's a built-in starting point for paging through the records (and performing change detection on them). The number auto-scales up or down depending on how quickly it performed change detection on the previous page.


From memory, the Aurion query tool can be configured to limit the number of results that are returned.

0
Answered

Aurion QueryID length

Eddie Kirkman 9 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 3

My Aurion QueryID is 16 characters long, but because we are sending a parameter/option with the queryID (i.e. my QueryID field is like: query1234567890a,XML_FILE_PATH=file.xml) I am getting the validation error message.


Import all entities from connector failed.
Import all entities from connector AurionDEVPerson failed with reason QueryId cannot exceed 16 characters
Parameter name: queryId. Duration: 00:02:06.0296668
Error details:
System.ArgumentOutOfRangeException: QueryId cannot exceed 16 characters
Parameter name: queryId
at Unify.Communicators.AurionAgent.QueryToXml(String queryId, String expectedObjectName)
at Unify.Connectors.AurionApiReadingConnector.<GetAllEntities>d__4.MoveNext()
at System.Linq.Enumerable.WhereSelectEnumerableIterator`2.MoveNext()
at Unify.Framework.Collections.ActionOnExceptionEnumerator`1.MoveNext()
at Unify.Framework.Collections.EnumerableExtensions.<ActionOnLast>d__10`1.MoveNext()
at Unify.Framework.Collections.EnumerableExtensions.<ProduceAutoPages>d__7`1.MoveNext()
at Unify.Framework.Visitor.ThreadsafeVisitorEvaluator`1.Visit()
at Unify.Product.IdentityBroker.RepositoryChangeDetectionWorkerBase.PerformChangeDetection(IEnumerable`1 connectorEntities)
at Unify.Product.IdentityBroker.ChangeDetectionImportAllJob.ImportAllChangeProcess()
at Unify.Product.IdentityBroker.ChangeDetectionImportAllJob.RunBase()
at Unify.Framework.DefinedScopeJobAuditTrailJobDecorator.Run()
at Unify.Product.IdentityBroker.ConnectorJobExecutor.<>c__DisplayClass33_0.<Run>b__0()
at Unify.Framework.AsynchronousJobExecutor.PerformJobCallback(Object state)


I see from this

http://voice.unifysolutions.net/topics/326-improve-error-message-when-queryid-exceeds-maximum-length/

that this is desired/expected behaviour, but could we please either only validate that string up to the comma or add a field for any parameters that we want to append?


Answer
anonymous 9 years ago

Just remove the XML_FILE_PATH. It's not required in Identity Broker because it can be handled by the query tool.

0
Completed

Test Use case for 'adding' new phones only to Workday

Jacques Swanepoel 9 years ago in UNIFYBroker/Workday updated by anonymous 9 years ago 1

We need to test this use case given the changes to how we use the contact object

Answer
anonymous 9 years ago

Contact update split up to ensure that changes are 'nursed' into Workday.

0
Answered

Aurion XML error

Eddie Kirkman 9 years ago in UNIFYBroker/Aurion updated by anonymous 8 years ago 5

Setting up the Aurion connector, sending as the query ID the query name and the XML_FILE_PATH. The import all fails with error

Change detection engine import all items for connector Test failed with reason Expecting '?', '*', or '+'. Line 4, position 77.. Duration: 00:02:02.5742785

in the log we get:


Import all entities from connector failed.
Import all entities from connector AurionUser failed with reason Expecting '?', '*', or '+'. Line 4, position 77.. Duration: 00:02:00.8921187
Error details:
System.Xml.XmlException: Expecting '?', '*', or '+'. Line 4, position 77.


That suggests to me that there is a problem with the XML, but since we are using the XML_FILE_PATH just referring to the xml file name and the query is just writing to the file with no directory, there is no physical file to look at (this is how the Aurion guys have configured it). They did export me a file to a directory. Line 4 is:

<!ELEMENT AQT_Output (First_Name, ... Preferred_Name_+_Surname, ...)>

and position 77 is just after the + in the middle of a composite full name field.


I can see no reason why "+" would cause issues as it is not one of the 5 XML reserved characters(<,>,&,",'), but I am asking the Aurion consultant to remove that field from the query.


Any ideas why it would be an issue?

0
Completed

Public Field for Telephone Number structure

Jacques Swanepoel 9 years ago in UNIFYBroker/Workday updated by anonymous 9 years ago 1

Add Public field to the telephone number structure to ensure that the public/private status of a number is honoured

Answer
anonymous 9 years ago

Done. Thanks.

0
Answered

Aurion account requirements

Eddie Kirkman 9 years ago in UNIFYBroker/Aurion updated by anonymous 8 years ago 4

The doco just says "The name of the Security User account used to connect to the Aurion system."

the Aurion consultant has given us

"a ‘Batch Logon Only’ which means that it can only log on for batch processing and API processing (and cannot log on to Self Service or Core). It has got access to run any query and/or API that you like."

Can you tell me if the Aurion connector needs an interactive logon?

Answer
anonymous 8 years ago

As far as I can see the batch logon user is what we are using - at the time we were having all sorts of fun and games setting up connectivity so I was checking/confirming everything.  I think this can be closed off