Home
%3CLINGO-SUB%20id%3D%22lingo-sub-974527%22%20slang%3D%22en-US%22%3EManagement%20Agent%20Configuration%E2%80%93Part%202%3A%20FIM%20Service%20Management%20Agent%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-974527%22%20slang%3D%22en-US%22%3E%0A%20%26lt%3Bmeta%20http-equiv%3D%22Content-Type%22%20content%3D%22text%2Fhtml%3B%20charset%3DUTF-8%22%20%2F%26gt%3B%3CSTRONG%3E%20First%20published%20on%20MSDN%20on%20Nov%2017%2C%202016%20%3C%2FSTRONG%3E%20%3CBR%20%2F%3E%3CP%3EThis%20is%20the%20second%20post%20in%20a%20series%20on%20management%20agent%20configuration.%20In%20%3CA%20href%3D%22https%3A%2F%2Fblogs.msdn.microsoft.com%2Fconnector_space%2F2016%2F11%2F17%2Fmanagement-agent-configuration-part-1-active-directory-management-agent%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20Part%201%20%3C%2FA%3E%20%2C%20I%20covered%20configuration%20of%20an%20Active%20Directory%20management%20agent.%20In%20this%20post%2C%20I%E2%80%99d%20like%20to%20step%20through%20the%20FIM%20Service%20Management%20Agent%20(FIMMA).%20While%20you%20don%E2%80%99t%20necessarily%20have%20to%20have%20a%20FIMMA%2C%20you%20cannot%20move%20data%20between%20the%20Portal%20and%20Sync%20service%20without%20one.%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CBR%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3EBefore%20we%20can%20manipulate%20users%20and%2For%20groups%20with%20the%20FIM%20Synchronization%20Engine%2C%20it%20is%20necessary%20that%20we%20create%20Management%20Agents.%20Here%2C%20we%20will%20create%20a%20Management%20Agent%20for%20connecting%20the%20Synchronization%20Engine%20with%20the%20FIM%20Service%20Portal.%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CBR%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3EBegin%20by%20opening%20the%20Synchronization%20Engine%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CIMG%20alt%3D%22clip_image002%22%20border%3D%220%22%20height%3D%221031%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153801i815B2688BEC85428%22%20style%3D%22border%3A%200px%20currentcolor%3Bpadding-top%3A%200px%3Bpadding-right%3A%200px%3Bpadding-left%3A%200px%22%20title%3D%22clip_image002%22%20width%3D%221445%22%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CBR%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3EIn%20the%20menu%20on%20the%20top%20right-hand%20corner%2C%20select%20%E2%80%9CCreate%E2%80%9D%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CIMG%20alt%3D%22clip_image004%22%20border%3D%220%22%20height%3D%22449%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153802i843E882EB5B52AB8%22%20style%3D%22border%3A%200px%20currentcolor%3Bpadding-top%3A%200px%3Bpadding-right%3A%200px%3Bpadding-left%3A%200px%22%20title%3D%22clip_image004%22%20width%3D%22324%22%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CBR%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3EThis%20will%20open%20the%20%E2%80%9CCreate%20Management%20Agent%E2%80%9D%20wizard.%20For%20%E2%80%9CManagement%20agent%20for%3A%E2%80%9D%2C%20select%20%E2%80%9CFIM%20Service%20Management%20Agent%E2%80%9D.%20Enter%20a%20name%20for%20this%20MA%2C%20then%20click%20%E2%80%9CNext%E2%80%9D%20to%20continue%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CIMG%20alt%3D%22clip_image006%22%20border%3D%220%22%20height%3D%22785%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153803i1767CA0D7B5E9505%22%20style%3D%22border%3A%200px%20currentcolor%3Bpadding-top%3A%200px%3Bpadding-right%3A%200px%3Bpadding-left%3A%200px%22%20title%3D%22clip_image006%22%20width%3D%221060%22%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CBR%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3EEnter%20the%20name%20of%20the%20server%2C%20database%20and%20FIM%20Service%20base%20address.%20Next%2C%20select%20%E2%80%9CWindows%20Integrated%20Authentication%E2%80%9D%20and%20enter%20the%20previously%20created%20service%20account%2C%20password%20and%20domain%2C%20then%20click%20%E2%80%9CNext%E2%80%9D%20to%20continue.%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CIMG%20alt%3D%22MIMMA%22%20border%3D%220%22%20height%3D%22640%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153804iF6C836DB38C77552%22%20title%3D%22MIMMA%22%20width%3D%22855%22%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CBR%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3EIn%20the%20%E2%80%9CObject%20Types%E2%80%9D%20window%2C%20be%20sure%20to%20select%20%E2%80%9CPerson%E2%80%9D%20and%20then%20click%20%E2%80%9CNext%E2%80%9D%20to%20continue.%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CIMG%20alt%3D%22clip_image010%22%20border%3D%220%22%20height%3D%22731%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153805i25B6646133B6F7A1%22%20style%3D%22border%3A%200px%20currentcolor%3Bpadding-top%3A%200px%3Bpadding-right%3A%200px%3Bpadding-left%3A%200px%22%20title%3D%22clip_image010%22%20width%3D%22985%22%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CBR%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3EIn%20the%20%E2%80%9CAttributes%E2%80%9D%20window%2C%20you%20may%20select%20as%20many%20(or%20as%20few)%20attributes%20as%20you%20wish.%20Please%20note%2C%20however%2C%20that%20only%20attributes%20selected%20here%20will%20be%20available%20in%20the%20FIM%20Portal.%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CIMG%20alt%3D%22clip_image012%22%20border%3D%220%22%20height%3D%22708%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153806i4E825FFC49E386ED%22%20style%3D%22border%3A%200px%20currentcolor%3Bpadding-top%3A%200px%3Bpadding-right%3A%200px%3Bpadding-left%3A%200px%22%20title%3D%22clip_image012%22%20width%3D%22957%22%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CBR%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3EFor%20%E2%80%9CConnector%20Filter%E2%80%9D%2C%20you%20may%20configure%20these%20using%20the%20same%20steps%20found%20under%20this%20tab%20on%20the%20ADMA%2C%20found%20%3CA%20href%3D%22https%3A%2F%2Fblogs.msdn.microsoft.com%2Fconnector_space%2F2016%2F11%2F17%2Fmanagement-agent-configuration-part-1-active-directory-management-agent%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20here%20%3C%2FA%3E%20.%20In%20my%20environment%2C%20I%20filter%20two%20accounts%3A%20%3CSTRONG%3E%20administrator%20%3C%2FSTRONG%3E%20and%20the%20%3CSTRONG%3E%20Built-in%20Synchronization%20Account%20%3C%2FSTRONG%3E%20.%20%3CSTRONG%3EAdministrator%20%3C%2FSTRONG%3E%20is%20the%20default%20portal%20admin%20account%20(typically%2C%20the%20account%20you%20were%20logged%20in%20as%20when%20you%20installed%20the%20service%2Fportal).%20The%20%3CSTRONG%3E%20Built-in%20Synchronization%20Account%20%3C%2FSTRONG%3E%20is%20a%20default%20account%20(and%20very%20important%20one!)%20that%20gets%20created%20during%20the%20install.%20This%20is%20the%20account%20which%20fires%20workflows%2C%20performs%20modifications%20and%20generally%20does%20work%20for%20you%20in%20FIM%3B%20break%20it%20and%20everything%20goes%20off%20the%20rails.%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CIMG%20alt%3D%22image%22%20border%3D%220%22%20height%3D%22741%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153807i9DC022934E4D1360%22%20style%3D%22border%3A%200px%20currentcolor%3Bpadding-top%3A%200px%3Bpadding-right%3A%200px%3Bpadding-left%3A%200px%22%20title%3D%22image%22%20width%3D%22987%22%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CBR%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3EFor%20%E2%80%9CConfigure%20Object%20Type%20Mappings%E2%80%9D%2C%20as%20a%20best%20practice%2C%20there%20are%20two%20things%20we%20should%20do.%20First%2C%20select%20%E2%80%9CGroup%E2%80%9D%2C%20click%20on%20%E2%80%9CAdd%20Mapning%E2%80%9D%20and%20in%20the%20drop-down%20menu%20next%20to%20%E2%80%9CMetaverse%20object%20type%3A%E2%80%9D%2C%20select%20%E2%80%9Cgroup%E2%80%9D.%20Click%20%E2%80%9COK%E2%80%9D%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CIMG%20alt%3D%22clip_image016%22%20border%3D%220%22%20height%3D%22742%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153808i507D2916AD06516E%22%20style%3D%22border%3A%200px%20currentcolor%3Bpadding-top%3A%200px%3Bpadding-right%3A%200px%3Bpadding-left%3A%200px%22%20title%3D%22clip_image016%22%20width%3D%22999%22%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CBR%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3ENext%2C%20select%20%E2%80%9CPerson%E2%80%9D%2C%20click%20on%20%E2%80%9CAdd%20Mapping%E2%80%9D%2C%20and%20in%20the%20drop-down%20menu%20next%20to%20%E2%80%9CMetaverse%20object%20type%3A%E2%80%9D%2C%20select%20%E2%80%9Cperson%E2%80%9D.%20Click%20%E2%80%9COK%E2%80%9D%2C%20and%20then%20click%20%E2%80%9CNext%E2%80%9D%20to%20continue.%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CIMG%20alt%3D%22clip_image018%22%20border%3D%220%22%20height%3D%22739%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153809i9AD6C99C9C2DB51D%22%20style%3D%22border%3A%200px%20currentcolor%3Bpadding-top%3A%200px%3Bpadding-right%3A%200px%3Bpadding-left%3A%200px%22%20title%3D%22clip_image018%22%20width%3D%22998%22%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CBR%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3EFor%20%E2%80%9CAttribute%20Flow%E2%80%9D%2C%20you%20may%20leave%20these%20default.%20Please%20note%2C%20if%20you%20wish%20you%20flow%20custom%20attributes%2C%20you%20will%20need%20to%20create%20an%20associated%20flow%20here.%20Click%20%E2%80%9CNext%E2%80%9D%20to%20continue.%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CIMG%20alt%3D%22clip_image020%22%20border%3D%220%22%20height%3D%22730%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153810i2488CD87D3CE2C7C%22%20style%3D%22border%3A%200px%20currentcolor%3Bpadding-top%3A%200px%3Bpadding-right%3A%200px%3Bpadding-left%3A%200px%22%20title%3D%22clip_image020%22%20width%3D%22987%22%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CBR%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3EFor%20%E2%80%9CDeprovisioning%E2%80%9D%2C%20you%20may%20choose%20the%20default%2C%20choose%20to%20make%20explicit%20disconnectors%20or%20choose%20to%20stage%20a%20deletion.%20Click%20%E2%80%9CNext%E2%80%9D%20to%20continue.%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CIMG%20alt%3D%22clip_image022%22%20border%3D%220%22%20height%3D%22735%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153811iE2813739A4A8D2FB%22%20style%3D%22border%3A%200px%20currentcolor%3Bpadding-top%3A%200px%3Bpadding-right%3A%200px%3Bpadding-left%3A%200px%22%20title%3D%22clip_image022%22%20width%3D%22991%22%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CBR%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%E2%80%9CExtensions%E2%80%9D%20may%20be%20left%20default.%20To%20complete%20configuration%20and%20build%20the%20Management%20Agent%2C%20click%20%E2%80%9CFinish%E2%80%9D%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CIMG%20alt%3D%22clip_image024%22%20border%3D%220%22%20height%3D%22785%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153812i3403F3644F9DF5DD%22%20style%3D%22border%3A%200px%20currentcolor%3Bpadding-top%3A%200px%3Bpadding-right%3A%200px%3Bpadding-left%3A%200px%22%20title%3D%22clip_image024%22%20width%3D%221060%22%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%3E%3CBR%20%2F%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%20align%3D%22center%22%3EQuestions%3F%20Comments%3F%20Love%20FIM%20so%20much%20you%20can%E2%80%99t%20%3CEM%3E%20even%20%3C%2FEM%3E%20stand%20it%3F%3C%2FP%3E%3CBR%20%2F%3E%3CP%20align%3D%22center%22%3E%3CA%20href%3D%22mailto%3Aconnectorspace%40microsoft.com%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%20%3CSTRONG%3E%20EMAIL%20US%20!%20%3C%2FSTRONG%3E%20%3C%2FA%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%20align%3D%22center%22%3E%3CSTRONG%3E%20%26gt%3BWE%20WANT%20TO%20HEAR%20FROM%20YOU%26lt%3B%20%3C%2FSTRONG%3E%3C%2FP%3E%3CBR%20%2F%3E%3CP%20align%3D%22center%22%3E%23%23%20%3CA%20href%3D%22https%3A%2F%2Fblogs.msdn.microsoft.com%2Fconnector_space%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20https%3A%2F%2Fblogs.msdn.microsoft.com%2Fconnector_space%20%3C%2FA%3E%20%23%20%3CEM%3E%20%23%20%3C%2FEM%3E%3C%2FP%3E%0A%20%0A%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-974527%22%20slang%3D%22en-US%22%3EFirst%20published%20on%20MSDN%20on%20Nov%2017%2C%202016%20This%20is%20the%20second%20post%20in%20a%20series%20on%20management%20agent%20configuration.%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-974527%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Econfiguration%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Emanagement%20agent%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Esynchronization%20service%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Microsoft
First published on MSDN on Nov 17, 2016

This is the second post in a series on management agent configuration. In Part 1 , I covered configuration of an Active Directory management agent. In this post, I’d like to step through the FIM Service Management Agent (FIMMA). While you don’t necessarily have to have a FIMMA, you cannot move data between the Portal and Sync service without one.




Before we can manipulate users and/or groups with the FIM Synchronization Engine, it is necessary that we create Management Agents. Here, we will create a Management Agent for connecting the Synchronization Engine with the FIM Service Portal.




Begin by opening the Synchronization Engine


clip_image002




In the menu on the top right-hand corner, select “Create”


clip_image004




This will open the “Create Management Agent” wizard. For “Management agent for:”, select “FIM Service Management Agent”. Enter a name for this MA, then click “Next” to continue


clip_image006




Enter the name of the server, database and FIM Service base address. Next, select “Windows Integrated Authentication” and enter the previously created service account, password and domain, then click “Next” to continue.


MIMMA




In the “Object Types” window, be sure to select “Person” and then click “Next” to continue.


clip_image010




In the “Attributes” window, you may select as many (or as few) attributes as you wish. Please note, however, that only attributes selected here will be available in the FIM Portal.


clip_image012




For “Connector Filter”, you may configure these using the same steps found under this tab on the ADMA, found here . In my environment, I filter two accounts: administrator and the Built-in Synchronization Account . Administrator is the default portal admin account (typically, the account you were logged in as when you installed the service/portal). The Built-in Synchronization Account is a default account (and very important one!) that gets created during the install. This is the account which fires workflows, performs modifications and generally does work for you in FIM; break it and everything goes off the rails.


image




For “Configure Object Type Mappings”, as a best practice, there are two things we should do. First, select “Group”, click on “Add Mapning” and in the drop-down menu next to “Metaverse object type:”, select “group”. Click “OK”


clip_image016




Next, select “Person”, click on “Add Mapping”, and in the drop-down menu next to “Metaverse object type:”, select “person”. Click “OK”, and then click “Next” to continue.


clip_image018




For “Attribute Flow”, you may leave these default. Please note, if you wish you flow custom attributes, you will need to create an associated flow here. Click “Next” to continue.


clip_image020




For “Deprovisioning”, you may choose the default, choose to make explicit disconnectors or choose to stage a deletion. Click “Next” to continue.


clip_image022




“Extensions” may be left default. To complete configuration and build the Management Agent, click “Finish”


clip_image024




Questions? Comments? Love FIM so much you can’t even stand it?


EMAIL US !


>WE WANT TO HEAR FROM YOU<


## https://blogs.msdn.microsoft.com/connector_space # #