SailPoint ISC · MIM / FIM · PowerShell · Identity Engineering
Setting up a new identity system from scratch is so easy.. but we know that kinda never happens… we are always migrating from an old system to new or changing an existing system due to business changes. We went through the same process whereby we went from an OpenLDAP (ODSEE) being our primary source to … Read more
Following from my previous post on how to create a group with both static members and dynamic filter, I came across a scenario where post migration we have some customers who initially had a group with explicit members but we thought they could be converted to a filter based group which matches the business case. … Read more
We had a business case whereby a filter couldn’t really create groups which catered for the purpose. We also needed to put in some static members (Explicit Members) in it. Now by default a /Group in FIMService can either be Explicit or a Filter type group. But a Set allows you to have an explicit as … Read more
So if you have a large number of objects to update in FIMService it could be complicated.. Lithnet FIM/MIM Powershell Module makes it so much simpler.. Below is a script I used to say update all accounts which have “accountType” = oldaccounts and set “accountBlocked” to true (my custom schema). Some explanations I have set PageSize … Read more
So if you have been playing with Microsoft FIM (Forefront Identity Manager) / MIM (Microsoft Identity Manager) you would already happen to know its not the best user experience out of the box if you have a complex environment. Meet LithNet: https://github.com/lithnet A lot of tools written by MVP Ryan Newington under whom I have had … Read more