Filtered Index

A while ago I was seeing funny effects when syncing with the SAP UM driver to a SAP CUA (Central User Administration) system that distributes IDM-managed accounts further down to its own child system. I should've re-written my policies to avoid that situation in the first place, but who's ever got time for such a boring thing? Instead I explored the much more interesting problem of how to write a rule that delays subsequent modifies to the same object to ensure a minimum interval.

In this article, I wanted to share some of the error codes I ran into with Active Directory. My hope is that by posting the text of the error messages, someone else who runs into one of those specific errors, will be able to paste in the error message in Google, and find my article explaining what I did wrong, and how I fixed it.

Geoff Carman provides an overview of the bi-directional AS400 driver, and shares some examples on how to add new attributes.

With the release of Microsoft Windows 2008 server, new features have appeared in the operating system and Active Directory. One new feature that will probably come back to bite us, from an Identity Manager perspective, is a new feature of the Active Directory Users and Computers Microsoft Management Console (ADUC MMC) snapin. Here's the scoop on the new option to "Protect container from accidental deletion."

Geoff Carman recently ran into an issue with the Active Directory driver where eDirectory causes a problem in synchronizing events. The issue has to do with subtree moves. That is, moving a container object in Active Directory, and syncing that move event into eDirectory. Find out how he solved it.

I get asked regularly about High Availability for Novell Identity Manager implementations. (Most recently at a Sentinel training session, hi Sanath!) I had been meaning to write something about this for a while, and this request finally pushed me into doing it.