Identity Management Extensibility

Well, we are coming to the end of the first itinerary through ILM “2” extensibility.  Keeping this blog to the schedule has been a fun learning experience for me, and I appreciate the feedback.  I hope it is clear from this and the other ILM...

I will post tomorrow the originally scheduled topic of selecting attributes in an enumeration.  For now I thought it would be a better idea to post publically an answer we have given to a few customers who asked: What has changed in the web services...

As you may have seen in other announcements or in various unintentional hints the product previously known as Identity Lifecycle Manager (ILM) “2” is now Forefront Identity Manager (FIM) 2010 . The re-branding comes as part of an overarching strategy...

In my previous posts I introduced you to the basic web service protocols that ILM “2” uses.  In this post we show you how to use svcutil to generate your own client. Recall that svcutil is bundled with the Windows SDK.  We use version 6.0A of...

In answering a recent question, I provided an example of how to create a set programmatically.  Creating a set is no different than creating a group or person with one caveat.  A set requires a display name and a filter.  The display name...

In this post I show how to select specific attributes to return during an enumeration.  The purpose of this feature is to limit sending extra data over the wire.  This is an optional extension we added to WS-Enumeration for convenience. ...

Some in the product team will attend TechReady 8 this week in Seattle.  If you also are attending the conference, I invite to you attend one of our break outs, chalk talks, or instructor-led labs.  We are covering updated and in-depth material...

In the previous post I introduced WS-Transfer and provided two simple examples how ILM uses it.  In this post I introduce the second protocol, WS-Enumeration . In contrast to WS-Transfer, WS-Enumerations is a stateful protocol designed to enumerate...

In the previous two posts I introduced WS-Transfer and WS-Enumeration with examples on how ILM uses them.  In this post I introduce an extension to WS-Transfer we use for more efficient operations over the wire.  We will fully and formally document...

Welcome to the Identity Management Team’s extensibility blog. The purpose of this blog is to provide information, suggestions, examples, and show context to decisions regarding extensibility points in ILM. The primary focus of this blog is on the web...

The ILM Web Service is based on two key standard protocols: WS-Transfer and WS-Enumeration . When we describe the two protocols we must be careful to distinguish the “request” and the “response.” In our discussions, we assume that there is one client...

OK, now for the fun – Hello World with the web services and sample client!  In this post we get a specific person.  By specific , I mean we already know the person’s ObjectID.  In many scenarios you do not know the ObjectID ahead of time...

In this post we’ll discuss the new Prototype Public Resource Management client.  I uploaded the MSDN-style documentation to MSDN Code Gallery.  The purpose of this post is to walk you through the direction I’m thinking about for a supported...

I recently was writing help documentation for PowerShell cmdlets and came across a very helpful blog post .  In the future I hope the PowerShell team comes out with a more rich editing experience, but editing XML wasn’t that bad.

As promised, this week I introduce the new prototype of the Public Resource Management Client and the remaining schedule.  The theme of this quarter is “Yet Another FIM Portal”.  The FIM Portal is a great experience for both Administrators and...

In this week’s post we look at the three most common queries to search for existing groups: getting all groups, “my groups”, and groups that match a particular filter.  While these examples show off the current prototype client, the filters and principles...

Members from the product team will attend the TechEd 2009 conference next week in Los Angeles.  Fred, Alym, Joel, and myself will attend the conference to speak about FIM and staff the booth.  I invite you to attend our sessions: Alym and Joel...

I got a very good question today from a TAP customer last week which I hope is generally applicable.  The customer asked “What can I do with the web service interface?”  Fantastic question!  With the web service interface, you can…. Do...

Preparing for TechEd has eaten up cycles to proof today’s post. I should have the cycles on the plane this weekend.

Leading announcement: I appreciate the feedback I’ve gotten from some of you about the API of the new client. One piece of key feedback I want very much to incorporate is how we can unify accessing single-valued and multi-valued attributes. Please send...

Interesting topics from a new entry in the identity management blogging community: http://www.idmcrisis.com/

Please see David's excellent guide to using RCDCs: http://www.ilmbestpractices.com/blog/2009/11/fim-rcdc-explained-in-brief.html

In our last post we created a new group.  Now we’ll doing something truly exciting: We’ll add members to the group.  Adding and removing members is the same Put request.  The difference is we specify “Add” or “Remove” as the operation for...

In the previous post I introduced three web service protocols that ILM uses. In this post we will explore the first protocol, WS-Transfer . WS-Transfer is a stateless protocol designed to create, read, update, and delete object instances. We use the protocol...

Before we begin and following Craig’s lead , I’d like to be clear on ILM’s terminology. The reason for this is we use overloaded terminology when discussing ILM concepts that have important connotations in other contexts. Depending on your background...