Understanding run profiles and syncing

Hello,
 I working on a FIM setup with the following run profiles:
File Ma -full import and delta sync (imports a bunch of users and email addresses from a CSV)
FIM Ma - Export, Delta Import, Delta Sync (Exports update MV changes to portal, imports to confirm the changes and then performs a sync for some reason)
AD Ma - Export and Delta Import
 My understanding is that whenever a sync is done, it is done against the connector space and the MV, with each MA doing an import or export to the relevant CDS. What I'm not sure about is why I don't need to perform an AD Ma sync before exporting to
AD. My sync rules have been configured in the portal - would this be the reason?
If I didn't have my AD sync rules configured in the portal and ran everything from the sync service application would I need to do an AD MA sync?
Just trying to get a better understanding....
Thanks

Hi Peter,
Short answer is yes because the trigger to create the person in AD would be based on the synchronization rule and provisioning configuration being in the Portal. In reality its a bit more complex and really depends on how the provisioning is being done in
your environment.
Running a synchronization on the AD MA wouldn't normally result in a person being created in AD, its normally be for finding users in AD that need updating because their data is out of sync or flowing information back into FIM that AD is the authoritative
source for (such as user's objectSID) - there are other reasons but listing them all would take a while.  I would recommend adding a synchronization step to your AD MA though to ensure that all the data is in sync.
Based on what you have described I'm assuming the provisioning is using the Set/MPR/Workflow triple in the Portal to create a user in AD - so below is a rundown of what is more than likely what is happening in the background.
1. File MA Import & Delta Sync - Imports the user from the file and synchronizes them into FIM Metaverse. The synchronization step also tells FIM to create them in the FIM Portal on the next export
Breaking up the next one a bit
2a. FIM MA - Export - this creates the user in the FIM Portal. 
When the user is created in the Portal your AD Provisioning logic within the Portal gets applied to the user; and adds information telling FIM to create them in AD.
2b. FIM MA - Import - this imports the user from the FIM Portal including the information telling FIM to create them in AD
2c. FIM MA - Delta Sync - this synchronizes the updated information from the Portal into the Metaverse.  When this synchronization runs FIM finds that the user needs to be created in AD on the next export
3. AD MA Export & Delta Import - The export creates the user in Active Directory and then the import "confirms" that the user has been created.
There are a few other ways that provisioning  can happen but based on your description it sounds like the outline above should be what is happening in your environment.
Hope this helps!  But I'd also recommend checking out some of the Technet articles on outbound/inbound synchronization -> http://technet.microsoft.com/en-us/library/ee621259(v=ws.10).aspx
Andrew.

Similar Messages

  • Struggling to understand Service Profiles and jabber-config.xml

    Hi,
    I am doing my first Jabber 9.1 deployment and am striggling to understand the use of Service Profiles.
    Lots of documentation I have seen states that the jabber-config.xml file should be manually edited then uploaded to the CUCM TFTP servers.
    However much of the information contained in this file seems to be the same as that specified in Service Profiles.
    When should I use Service Profiles? - do they generate the default jabber-config.xml file or do they have some other purpose?
    The documentation seems confused and contradictory!
    Thanks

    Neither wins. The client will use one or the other depending on the platform and version.
    I am struggling to like Jabber - it seems there is a lack of quality documentation and lots of gotchas for the unwary.
    I can sympothize with that opinion. There is documentation but it sort of assumes you already know how the puzzle should look and only need guidence on completing individual tasks. The gotchas are a byproduct of the speed they are running development at. IMO this will settle down a bit around the 10.0 release of the *clients* (which will be after the system release of the server software). Every solution has gotchas, we're just a bit battle-weary of them on this one.
    For the moment, Jabber mastery is sort of a rare skillset similar to CCX: many can script, few can do it well. Few can make Jabber "sing" at the moment.
    Please remember to rate helpful responses and identify helpful or correct answers.

  • Duplicate Profiles and Syncing Issues

    My duplicate accounts are:
    # [email protected]
    # [email protected]
    # [email protected]
    I have a problem that has plagued me for several years now and keeps getting worse. I have three profiles setup because of various log-in issues over the years. I would like to merge these profiles or get rid of two of them, whatever is easiest. The main issue this is causing me is that I never know what I am logged in as when I do things like post in the forums. Further, I can't get syn to work at all. Especially between Mobile and Desktop. Any ideas?
    The issue I have with syncing between devices and desktop is that both show the "Connect to Sync" codes, meaning that neither is going to allow me to input the code from the other. I've tried everything.
    Basically, I have used Chrome for the past 6 months because of this issue. I'd like to get back to Firefox, but not if I can't sync and can't have a single functioning profile.

    For this purpose you have Administration -> Comfig Migration Admin (Configuration Migration Utility).
    http://download.oracle.com/docs/cd/E17904_01/doc.1111/e10792/c06_migration.htm#CHDBIJAJ
    Regards,
    Boris

  • Run Profile Deletion and Speeding up portal access

    Hi,
     My FIM 2010 R2 architecture uses 4 servers as follows:
    1 x fim server, 1 x fim sql DB (fim service DB), 1 x sync server + fim SQL DB and 1 x SSPR
    I have a PowerShell sync scripts running every 5 minutes which take fim portal changes and export those changes to AD.
    I've created some PowerShell scripts for removing old run profiles, but am not sure how many run profiles to keep? Reading online I came across one blog post which mentions that Ms recommend no more than 10,000 run profile history entries - about 4 days
    worth (although I can't find official Ms recommendations).
     I'm assuming it's OK, but are there any issues with one script running a run profile at the same time as another script which deletes older run profiles?
     On a side note, if anyone has any tips for speeding up fim portal access I'd be glad to hear them - each page in my environment takes about 30 seconds to load, regardless of the number of users connected.
    thanks in advance
    IT Support/Everything

    On a side note, if anyone has any tips for speeding up fim portal access I'd be glad to hear them - each page in my environment takes about 30 seconds to load, regardless of the number of users connected.
    If every page load of the FIM Portal is taking 30 seconds, something is broken in your environment. I get better performance than that running an entire test FIM configuration in virtualized machines on my laptop (AD, Exchange, FIM Portal/Service/Sync, etc.)
    When you first start up the environment and bring up a given page the first time, it can take some time, but once you get to steady state, you should not be seeing delays like that.
    Any chance you have an authentication configuration error (Kerberos settings, SPN assignment, DNS settings, etc.) that is causing authentication to time out on each page load?
    During that 30 second delay, are any of your servers pegged on CPU or IO?
    If this is a virtual environment or if you are using SAN based disk, do you have enough IOPS allocated?

  • Using the the multiple profiles and running more than one instance of Fire fox at atim

    I use F/F in a gaming situation I needed to be able to run more than one session at a time and read about a feature called multiple profiles. Then I read iin another forum that I could have multiple instances with the following bat file :
    @echo off
    set MOZ_NO_REMOTE=1
    start "" "C:\Documents and Settings\Hilton Wiggins\My Documents\Fire Fox non Beta\firefox.exe" -p-no-remote
    set MOZ_NO_REMOTE=0
    I also have the Beta 4.06 on my machine and even though the batch file directs it to wither the Beat or the Non Beta they both seem to track the profiles and can be used in either version.
    However It's not working as I described running two browsers with grease monkey it will start to mis handle data and they both lock up

    There is no need to set MOZ_NO_REMOTE, remove that part of the bat file. Change the start line to:
    start "" "C:\Documents and Settings\Hilton Wiggins\My Documents\Fire Fox non Beta\firefox.exe" -no-remote -p "profile name"

  • Need help understanding profiles and color management

    I made the big leap from inexpensive inkjets to:
    1 Epson 3800 Standard
    2 Spyder3Studio
    I have a Mac Pro Quad, Aperture, PS3, etc.
    I have a steep learning curve ahead, here's what I've done:
    1 Read a lot of books, watched tutorials, etc.
    2 Calibrated the monitor
    3 Calibrated the printer several times and created .icc profiles
    What I've found:
    1 The sample print produced by Spyder3Print, using the profile I created with color management turned off in the print dialog, looks very good.
    2 When I get into Aperture, and apply the .icc profile I created in the proofing profile with onscreen proofing, the onscreen image does not change appreciably compared with the no proof setting. It gets slightly darker
    3 When I select File>Print image, select the profile I created, turn off color management and look a the resulting preview image it looks much lighter and washed out than the onscreen image with onscreen proofing turned on.
    4 When I print the image, it looks the same as was shown in the print preview...light and washed out, which is much different than what is shown in edit mode.
    5 When I open PS3 with onscreen soft-proofing, the onscreen image is light and washed out...just like displayed in PS3 preview. If I re-edit the image to look OK onscreen, and print with the profile and color management turned off, the printed image looks OK.
    So, why am I confused?
    1 In the back of my simplistic and naive mind, I anticipated that in creating a custom printer profile I would only need to edit a photo once, so it looks good on the calibrated screen, and then a custom printer profile will handle the work to print a good looking photo. Different profiles do different translations for different printers/papers. However, judging by the PS work, it appears I need to re-edit a photo for each printer/paper I encounter...just doesn't seem right.
    2 In Aperture, I'm confused by the onscreen proofing does not present the same image as what I see in the print preview. I'm selecting the same .icc profile in both locations.
    I tried visiting with Spyder support, but am not able to explain myself well enough to help them understand what I'm doing wrong.
    Any help is greatly appreciated.

    Calibrated the printer several times and created .icc profiles
    You have understand that maintaining the colour is done by morphing the colourants, and you have understood that matching the digital graphic display (which is emissive) to the print from the digital graphic printer (which is reflective) presupposes a studio lighting situation that simulates the conditions presupposed in the mathematical illuminant model for media independent matching. Basically, for a display-to-print match you need to calibrate and characterise the display to something like 5000-55000 kelvin. There are all sorts of arguments surrounding this, and you will find your way through them in time, but you now have the gist of the thing.
    So far so good, but what of the problem posed by the digital graphic printer? If you are a professional photographer, you are dependent on your printer for contract proofing. Your prints you can pass to clients and to printers, but your display you cannot. So this is critical.
    The ICC Specification was published at DRUPA Druck und Papier in Düsseldorf in May 1995 and ColorSync 2 Golden Master is on the WWDC CD for May 1995. Between 1995 and 2000 die reine Lehre said to render your colour patch chart in the raw condition of the colour device.
    The problem with this is that in a separation the reflectance of the paper (which is how you get to see the colours of the colourants laid down on top of the paper) and the amount of colourant (solid and combinations of tints) gives you the gamut.
    By this argument, you would want to render the colour patch chart with the most colourant, but what if the most colourant produces artifacts? A safer solution is to have primary ink limiting as part of the calibration process prior to rendering of the colour patch chart.
    You can see the progression e.g. in the BEST RIP which since 2002 has been owned by EFI Electronics for Imaging. BEST started by allowing access to the raw colour device, with pooling problems and whatnot, but then introduced a primary ink limiting and linearisation.
    The next thing you need to know is what colour test chart to send to the colour device, depending on whether the colour device is considered an RGB device or a CMYK device. By convention, if the device is not driven by a PostScript RIP it is considered an RGB device.
    The colour patch chart is not tagged, meaning that it is deviceColor and neither CIEBased colour or ICCBased colour. You need to keep your colour patch chart deviceColor or you will have a colour characterisation of a colour managed conversion. Which is not what you want.
    If the operating system is colour managed through and through, how do you render a colour test chart without automatically assigning a source ICC profile for the colourant model (Generic RGB Profile for three component, Generic CMYK Profile for four component)?
    The convention is that no colour conversion occurs if the source ICC device profile and the destination ICC device profile are identical. So if you are targetting your inkjet in RGB mode, you open an RGB colourant patch chart, set the source ICC profile for the working space to the same as the destination ICC profile for the device, and render as deviceColor.
    You then leave the rendered colourant test chart to dry for one hour. If you measure a colourant test chart every ten minutes through the first hour, you may find that the soluble inkjet inks in drying change colour. If you wait, you avoid this cause of error in your characterisation.
    As you will mainly want to work with loose photographs, and not with photographs placed in pages, when you produce a contract proof using Absolute Colorimetric rendering from the ICC profile for the printing condition to the ICC profile for your studio printer, here's a tip.
    Your eyes, the eyes of your client, and the eyes of the prepress production manager will see the white white of the surrounding unprinted margins of the paper, and will judge the printed area of the paper relative to that.
    If, therefore, your untrimmed contract proof and the contract proof from Adobe InDesign or QuarkPress, or a EFI or other proofing RIP, are placed side by side in the viewing box your untrimmed contract proof will work as the visual reference for the media white.
    The measured reference for the media white is in the ICC profile for the printing condition, to be precise in the WTPT White Point tag that you can see by doubleclicking the ICC profile in the Apple ColorSync Utility. This is the lightness and tint laid down on proof prints.
    You, your client and your chosen printer will get on well if you remember to set up your studio lighting, and trim the blank borders of your proof prints. (Another tip: set your Finder to neutral gray and avoid a clutter of white windows, icons and so forth in the Finder when viewing.)
    So far, so good. This leaves the nittygritty of specific ICC profiling packages and specific ICC-enabled applications. As for Aperture, do not apply a gamma correction to your colourant patch chart, or to colour managed printing.
    As for Adobe applications, which you say you will be comparing with, you should probably be aware that Adobe InDesign CS3 has problems. When targetting an RGB printing device, the prints are not correctly colour managed, but basically bypass colour management.
    There's been a discussion on the Apple ColorSync Users List and on Adobe's fora, see the two threads below.
    Hope this helps,
    Henrik Holmegaard
    technical writer
    References:
    http://www.adobeforums.com/webx?14@@.59b52c9b/0
    http://lists.apple.com/archives/colorsync-users/2007/Nov/msg00143.html

  • My delete button in my to do's closes the app. I've closed all the background running apps and have restarted my phone and even tried syncing to my iTunes. It's driving me nuts. Please help!

    My delete button in my to do's closes the app. I've closed all the background running apps and have restarted my phone and even tried syncing to my iTunes. It's driving me nuts. Please help!

    Will not complete a sync without crashing and saying cannot read to the device or something to that effect.
    That sounds familiar.
    Just doublechecking ... have you worked through the suggestions from the following document in the course of your troubleshooting to date?
    [What to do when Windows displays a blue screen error message or restarts when syncing the iPhone or iPod touch|http://support.apple.com/kb/TS1502]
    (The stuff I was worried about in my initial reply has since been documented in its own troubleshooting document. Some of the symptoms of that are covered in: [iTunes for Windows: System restarts, blue screen, or quits unexpectedly when accessing iTunes Store|http://support.apple.com/kb/TS3441] )

  • My profiles and bookmarks keep vanishing, I am running windows 7.

    New computer, 2 months, running windows 7. Installed latest firefox. It has crashed a few times, and all of my profiles and bookmarks have disappeared 3 times now. Unable to recreate event. Running Trend Micro AV. Any ideas?

    What do you mean by '''"I verified the profile and it is selecting the same profile as my old computer"'''?
    Have you seen this? <br />
    http://support.mozilla.com/en-US/kb/Recovering+important+data+from+an+old+profile

  • Recently my pc crashed and I had to have a new profile built.  now when syncing my iphone to the computer the sync gets stuck on step 8 and "syncing artwork"  It never finishes syncing...just sits there for hours.  How do I fix this?

    Recently my pc crashed and I had to have a new profile built.  Now when syncing my iphone 4s to the computer the sync gets stuck on step 8 and "syncing artwork"  It never finishes syncing...just sits there for hours.  Subsequently most of my music and apps are missing from my iphone because it never finishes syncing.  How do I fix this?

    1) ensure iTunes is authorized for your iTunes store account(s)
    2) connect your device and right-click or control-click it in the iTunes Source list, then choose transfer purchases from the shortcut menu that appears.
    3) sync the device
    iTunes will wipe the iPhone but, since you transferred your purchases in the previous step, your content will be in your library and you can re-populate the iPhone with it.
    above works for purchases from the iTunes store. for everything else, check out this post by Zevoneer.

  • I have a new macbook pro running lion and want to update the software on my ipod touch. My old macbook ran 10.4.11 and won't update - but the new computer says I have to update on the computer I normally sync on or my music will be lost. Solution?

    I have a new macbook pro running lion and want to update to ios 5 on my ipod touch.  My old macbook only has 10.4.11 and can't be updated to lion - and won't update my ipod touch to ios 5.  But the message on my new macbook pro says I have to update on the computer I normally use for syncing or my music will be lost.  Is there any solution for this?

    try exporting your iTunes libary from the old computer to the new one
    take a look at this from apple
    http://support.apple.com/kb/HT4527
    I am not sure you have home shareing with 10.4.11 but if you do it works very nicely
    Mike

  • Last computer i was able to make 3 profiles and run 3 windows. each time it asked for the profile when i wanted to start each window. how can i set that up again

    ast computer i was able to make 3 profiles and run 3 windows. each time it asked for the profile when i wanted to start each window. how can i set that up again

    last time some1 set it up for me. i would only have 1 shortcut on my desktop. everytime i clicked on it, it would ask me which profile i wanted. even if i had 1 or 2 of the others open it would still ask me which profile i wanted to open. i want to be able to do it that way again.
    yes i already set up the 3 profiles. but once i open up the one profile, and click on the short cut to open another, it just opens a brwser window with the profile in use. so i could open 10 windows, its only 1 profile, the first profile i used.
    and yes i have the box not checked

  • My iPad Air gets a error when I try to backup.   It does sync properly.  My iPhone backs up and syncs without isssue.  I am running latest itunes and iOS 8 versions.  Thank you.

    My iPad Air gets an unknown error when I try to backup.   It does sync properly.  My iPhone backs up and syncs without isssue.  I am running latest itunes and iOS 8 versions.  Thank you.

    Try rebooting your computer and reset the iPad. Press and hold both the Home button and the Sleep/Wake button continuously until the Apple logo appears. Then release the button and let the device restart. You will not lose data doing this. It's like a computer reboot.

  • I just installed icloud and i dont understand it. me and my sister share an itunes account and if i sync through icloud does it mean that our stuff will be on each others device?

    i just installed icloud and i dont understand it. me and my sister share an itunes account and if i sync through icloud does it mean that my things will sync to her device?

    No. She needs to setup her own iTunes account and purchase her own iTunes media.

  • I have iphone 3gs ios 6.1.3 .. I have a problem I can not look contact profile and save it. I already sync with outlook and windows books also can not be seen. I tried to add a contact on the contact menu, but the result like restart ... (but not restart

    I have iphone 3gs ios 6.1.3 .. I have a problem I can not look contact profile and save it. I already sync with outlook and windows books also can not be seen. I tried to add a contact on the contact menu, but the result like restart ... (but not restart the device, not just stored). I am confused about this issue ... please help ..
    thank you in advance.

    Your suggestion worked perfectly.  I can't believe there is nothing in any of the instructions I have seen online at the Yahoo and Apple help sites about the making sure the right default account is checked.  I don't think I was even aware there was a "default account" setting.  Thank you so much.

  • Running 10.4.11... do I need to/can I upgrade in order to get iTunes 10 and sync latest ios5 devices?

    running 10.4.11... do I need to/can I upgrade in order to get iTunes 10 and sync latest ios5 devices?

    If you have the following you can upgrade to Leopard:
    Leopard System requirements
    You must have a Macintosh computer with:
    an Intel processor or a PowerPC G4 (867 MHz or faster) or G5 processor
    a DVD drive >built-in FireWire
    at least 512 MB of RAM (additional RAM is recommended for development purposes)
    a built-in display or a display connected to an Apple-supplied video card supported by your computer
    at least 9 GB of disk space available, or 12 GB of disk space if you install the developer tools
    If you meet the following you can upgrade to Snow Leopard:
    Snow Leopard General requirements
    Mac computer with an Intel processor
    1GB of memory
    5GB of available disk space
    DVD drive for installation
    Some features require a compatible Internet service provider; fees may apply.
    Some features require Apple’s MobileMe service; fees and terms apply.
    And, lastly, if you meet these requirements you can upgrade to Lion:
    Lion System Requirements
    Mac computer with an Intel Core 2 Duo, Core i3, Core i5, Core i7, or Xeon processor
    2GB of memory
    OS X v10.6.6 or later (v10.6.8 recommended)
    7GB of available space
    Some features require an Apple ID; terms apply.
    You must upgrade to Lion to use iCloud.

Maybe you are looking for

  • How to check on files backed up in Time Machine

    I have recently converted to using Time Machine (vs. Chronosync) to backup files on my Macbook Pro.  I'm still using Chronosyn for my iMac, but may change to TimeMachine as well for simplicity sake. Can someone tell me how I can view that backup up f

  • Message mapping with signature changed

    Hello, I have a mapping whose incoming and outgoing message has the same message type, let's say the message type for both in and out message is *MT_Material *. The mapping basically copy all data from in message to out message, however, the out mess

  • Company Merger Prerequisite - SAP MM

    Hi Experts, Before posing i have check the post regarding this, but not find suitable solution. We have 2 company codes, now we have to merger both company codes under single company code. In MM & CIN what will be prerequisites, scenario's & cut over

  • SAP HR and BI

    Hi All, I am a SAP HR consultant with 4 ys of exp, now i want to aquire additional skills of BI. I have read that BI's Infocube concept extends to HR.. Is it a good transition/decision for a HR consultant to extend skills in BI..? can anyone tell em

  • Please help me in configuring a router!

    Hi! I have to configure a new router with a static route. No routing protocol will be used. Since, I'm a budding Network aspirant i do not know much about things. My senior Network Engineer has asked me to configure this router. There's an apartment