One of the coolest features in FIM 2010 is the declarative provisioning. It allows you to do a lot of things by simply clicking together the desired items from within the Portal. The alternative is the "classical rules extensions". This requires writing .net code to extend the possibilities of an MA. I prefer the declarative provisioning. I'm not saying you should abandon classical all the way though. I'm using the following logic to decide between them:
- Can it be done from within the Portal (using normal Synchronization Rules)
- If not: can it be done by writing a rule extension to be used in the MA
- If not: can it be done by writing a workflow to be used in the Portal
I've never done 3 to be honest. Most attribute flows and transformations I can manage by defining flows in the Portal. Creating a unique account name I do with a rules extension. I tend to take the best of two worlds. Some people, often seasoned MIIS/ILM folks, still prefer to use classical rules extensions because of the debugging options. I can't blame them, with the declarative rules you're sometimes left alone in the dark. So here are some checks to do when your MA of choice is just refusing to show those "provisioning adds" you desire.
This is how it looks when it's not working, you run your import and synchronization profiles and no "provisioning adds" are being shown. All you see is some EAF's back to FIM flowing "Not applied" for the "SynchronizationRuleStatus" attribute. And then you say: What, Not applied? Why? How? It sure as hell isn't my fault, I did it all by the book!
[...]
0 comments:
Post a Comment