Identity Broker Forum

Welcome to the community forum for Identity Broker.

Browse the knowledge base, ask questions directly to the product group, or leverage the community to get answers. Leave ideas for new features and vote for the features or bug fixes you want most.

0
Fixed

Strange behaviour of CSV connector export

Matthew Clark 13 years ago in CSV connector updated by anonymous 10 years ago 7

The CSV connector is exhibiting some strange behaviour when exporting. See below a file that was written to. Telephone is a multivalue string field in the connector schema - the rest are strings.

Key,Name,EmployeeID,Telephone,Email
13,Matthew Clark,1337,another@address.com,Unify.Framework.StringValue[]
19,Anthony Sheehy,1339,tony.sheehy@unifysolutions.net,Unify.Framework.StringValue[]
100001,Josef,100001,mail@maily.com,System.Collections.Generic.List`1Unify.Framework.StringValue

Telephone and email have seemingly switched value types. I am assuming this is why the string value array writing has appeared.


CSV Export User.png
0
Answered

Identity Broker Service does not start - event viewer error indicates that connection string attribute is missing even though attribute exists in extensible configuration

Joe Varkey 15 years ago updated by anonymous 10 years ago 4

Task:
Installation of Identity Broker for SAP HCM

Task List:
1. Install Identity Broker service
2. Configure Identity Broker service
3. Install and configure connector and adapter components.

After the successfull installation of Identity Broker service the Identity Broker database was created and the Identity Broker script ran sucessfully. The next step was to configure the service with the datbase connection details as given below. Upon starting the Identity Broker service the following error was captured as given below.

The error indicates that the connection string is missing in the configuration file however the string is present in the DataEngine.extensibility.config.xml configuration.

DataEngine Configuration:
<DataEngine>
<dataRepository>
<dataConnection name="sql" repository="FIM_DEV_Unify_IdentityBroker" connectionString="Data Source=amausgcdbad05;Initial Catalog=FIM_DEV_Unify_IdentityBroker;Integrated Security=True" />
</dataRepository>
</DataEngine>

DataEngine Configuration Values:
Database type = SQL
Database server = amausgcdbad05
Database Name = FIM_DEV_Unify_IdentityBroker

Event Viewer:

  • <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  • <System>
    <Provider Name="UNIFY Identity Broker v3.0 service" />
    <EventID Qualifiers="0">0</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-01-11T23:07:57.000000000Z" />
    <EventRecordID>1264</EventRecordID>
    <Channel>Application</Channel>
    <Computer>AMSGCQAP01.int.alliedmills.com.au</Computer>
    <Security />
    </System>
  • <EventData>
    <Data>Service cannot be started. Unify.Framework.AdoNetDataControlConfigurationException: Missing connectionString attribute from <dataConnection name="sql" repository="FIM_DEV_Unify_IdentityBroker" /> at Unify.Framework.AdoNetDataControlFactoryBase.SetConfiguration(XElement configurationElement) at Unify.Framework.SqlServerDataControlFactory..ctor(XElement element) at Unify.Framework.SqlServer.SqlServerDataControlGenerator.CreateComponent(XElement element) at Unify.Framework.PlugInGeneratorBase`4.CreateComponent(TFactoryInfo factoryInformation) at Unify.Framework.StoredValuesEngine..ctor(IAdoNetDataControlGenerator dataControlGenerator, DirectoryInfo executingAssemblyDirectory) at Unify.Framework.StoredValuesEnginePlugInFactory.CreateComponent(IUnifyEnginePlugInFactoryInformation factoryInformation) at Unify.Framework.DependencyPlugInGenerator`4..ctor(ICollection`1 plugInGenerator, IPlugInFactory`2 factoryInformationFactory) at Unify.Framework.UnifyEngine..ctor(IEnumerable`1 additionalPlugInFactories, Di...</Data>
    </EventData>
    </Event>
0
Fixed

Delta import fails when last seen change log entry not found.

When performing a delta import, the MA performs a change log request for the last seen change log entry. If the change log entry has been cleared or truncated so the last seen change log entry no longer exists the delta operation stops and the following exception message is logged by FIM

The extensible extension returned an unsupported error.
 The stack trace is:
 
 "System.Exception: Changelog corruption detected. Could not find changelog entry with change number 48.
   at Unify.Product.IdentityBroker.LdapConnectionProxy.PartitionDeltaRequestPaged(String partitionDN, Int64 lastChangeNumber, Int32 pageSize) in s:\HG\Product\FIMMA\Working\Source\Unify.IdentityBroker.FIMAdapter\LdapConnectionProxy.cs:line 189
   at System.Linq.Enumerable.<SelectManyIterator>d__14`2.MoveNext()
   at System.Linq.Enumerable.WhereSelectEnumerableIterator`2.MoveNext()
   at System.Linq.Enumerable.<SelectManyIterator>d__14`2.MoveNext()
   at Unify.Product.IdentityBroker.ExtensionMethods.Take[TSource](IEnumerator`1 source, Int32 count, IList`1& items)
   at Unify.Product.IdentityBroker.ExtensionMethods.<Page>d__0`1.MoveNext()
   at Unify.Product.IdentityBroker.ImportProxy.Import(GetImportEntriesRunStep importRunStep) in s:\HG\Product\FIMMA\Working\Source\Unify.IdentityBroker.FIMAdapter\ImportProxy.cs:line 113
Forefront Identity Manager 4.1.3599.0"

The MA should perform some kind of discovery procedure at this point. Also ensure that a last seen change number of 0 (changeLogKey auto increment starts at 1) is covered.

0
Answered

How do you create gtrListFilters in IdB4.0?

Matthew Woolnough 13 years ago in UNIFYBroker/Frontier ichris/chris21 updated by anonymous 10 years ago 6

I need to know how to implement gtrListFilters in IdB4.0.
The doco for the filters is documented here:
https://unifysolutions.jira.com/wiki/display/IDBCHRS305/Frontier+chris21+connector#Frontierchris21connector-GTRfilterformat

Below is one of the filters I need to implement. I can't see anywhere in the GUI this can be implemented.

<connectorconfiguration configuration="readingAndWritingConnector">
	<connector connector="Unify.Connectors.Chris21.GTR" id="{BB362CE2-985C-486d-9D53-8A5C4909B938}" name="Chris21 Placement Connector" key="detnumber">
		<entitySchema>
			<field name="detnumber" validator="string" readonly="True" required="True" key="True" />
			<field name="posstart" validator="date" readonly="True" required="True" key="True" />
			<field name="posend" validator="date" readonly="True" />
			<field name="posnumber" validator="string" readonly="True" />
			<field name="posstatus" validator="string" readonly="True" />
			<field name="posempocc" validator="string" readonly="True" />
		</entitySchema>
		<entitySchemaValidators>
			<validator name="string" validatorGenerator="Unify.Framework.EntityStringValidatorFactory,Unify.Framework.Entity.Schema" />
			<validator name="date" validatorGenerator="Unify.Framework.EntityDateValidatorFactory,Unify.Framework.Entity.Schema" />
		</entitySchemaValidators>
		<image>iVBO<snip> VORK5CYII=</image>
		<communicator logActive="True" type="http" gtrForm="pos" gtrName="broker1prod" gtrSecurePassword="9Wu6XRqV4pgisJmPm4WO3Q==" gtrPassword="" skipLogout="False" gtrAllowHttp="True" gtrShowTranslations="False" gtrListRequest="Default" gtrChunkSize="1000" httpUri="https://hrselfservice/Web/Scalable/c21connect.asp" encoding="UTF-8" contentType="application/x-www-form-urlencoded">
			<gtrListFilters>
				<gtrListFilter filterValue="posend:GE:{DATETODAY}:or" />
				<gtrListFilter filterValue="posend:EQ::" />
			</gtrListFilters>
		</communicator>
	</connector>
	<getAllEntities>
		<timing name="RecurringTimespan">
			<timespan value="864000000000" />
		</timing>
	</getAllEntities>
</connectorconfiguration>
0
Answered

Generating FIM Packaged Management Agent

Paul Barratt 13 years ago in UNIFYBroker/Microsoft Identity Manager updated by anonymous 10 years ago 3

Generating an FIM Packaged Management Agent for an adapter and selecting a Save Location of FIM Instance under the Save Options the IdB creates three new folders

.\UIShell\XMLs\PackagedMAs

under the path where the packaged MA file should be created

%Program Files%\Microsoft Forefront Identity Manager\2010\Synchronization Service\UIShell\XMLs\PackagedMAs

which in the test environment resulted in the xml being placed in the following directory:

C:\Program Files\Microsoft Forefront Identity Manager\2010\Synchronization Service\UIShell\XMLs\PackagedMAs\UIShell\XMLs\PackagedMAs

0
Answered

API limit for GAPPs service account

Monash 10 years ago in UNIFYBroker/Google Apps updated by anonymous 10 years ago 5

Hi Adam

Can you please help me answer these questions as Google has asked me the same. I had requested higher API limits for our accounts. Currently I am chewing threw them .. probably at some rate of around 30000 accounts for 150k API Calls.. have gone through 3 accounts already and have managed just to push out 70-80k object changes

The number of users. - About 300,000
Average number of requests per day/per user (calculation describing your expected usage of the API).
Which API methods will be called and what will be the frequency?Are you polling the API changes to user resources?

0
Answered

GoogleApps Error - Stream was not readable

Monash 10 years ago in UNIFYBroker/Google Apps updated by anonymous 10 years ago 11

Hi

Today we are seeing the following error in gapps contacts and calendar

20150602,23:59:55,UNIFY Identity Broker,Change detection engine,Error,"Change detection engine import all items failed.
Change detection engine import all items for connector gappsCalendarConnector failed with reason Stream was not readable.. Duration: 00:00:00.7488192
Error details:
System.ArgumentException: Stream was not readable.

20150602,23:59:55,UNIFY Identity Broker,Change detection engine,Error,"Change detection engine import all items failed.
Change detection engine import all items for connector gappsSharedContactConnector failed with reason Stream was not readable.. Duration: 00:00:00.6240160
Error details:
System.ArgumentException: Stream was not readable.

Our developer has tested the fim-svc credentials with oauth 2.0 and he says the credentials are fine.

We are seeing this in our DEV and QAT google environments.. but not with users..
Any idea on what is causing this?

0
Completed

Unclear as to how to edit an adapter DN

Matthew Clark 12 years ago updated by anonymous 10 years ago 2

Just some immediate gut reactions to trying to configure an adapter DN (before I have long enough to think like a developer and justify it)

  • It's a bit confusing as to how to go to edit the DN template. The path you take is to "Edit Adapter Properties" and on its second screen, but I wouldn't have immediately known by looking at it. This is also a bit confusing after IdB 4 lets you click directly on the DN template button
  • Mousing over the template shows the "Edit" word at the very right hand side of the template window. My instinct was to go "yes I do want to edit it, click where my mouse is to edit it". Instead, you have to go over to the Edit button to do so.

Would be worth getting some other opinions on how people feel when using it but those were my immediate reactions

0
Completed

Register WCF endpoint during installation

Patrick Johannessen 12 years ago updated by anonymous 10 years ago 1

Currently the service requires local admin to register it automatically or it must be registered manually. Have had numerous requests to see if we can automate this, most recently from Aurion Corp. Alternatively we'll need to include the script in the installer or something so that the process is much easier.

0
Completed

Add StatusID field to attribute mappers

Matthew Woolnough 12 years ago in UNIFYBroker/Learnology Life updated by anonymous 10 years ago 1

When StatusID configured as a string:

20130530,02:56:45,An entity failed validation.,Connector Processor,Warning,The entity eab7a3e2-6529-4a59-844e-ff4cf9b089a8 on connector 960b25bd-e59a-46a1-a90b-f24d53f24dc0 failed validation 1 times for the following reasons: Type ShortValue of value 1 in field StatusID is invalid. Expected type StringValue.,Normal

Same for when configured as int. As per IDB-71 the short validator is in v4.0.

Add mapping from short to int.