 |
 |
Thanks Ian, nice to know we’re not alone !!
Kind Regards
Steve
From: Discussion
for MS IDM tools liks ILM and FIM [mailto:[log in to unmask]]
On Behalf Of Ian Swift (Staff)
Sent: 13 November 2015 09:52
To: [log in to unmask]
Subject: Re: Group management with FIM/MIM or other tools
Hi Steve,
This is something we’re battling with at the moment too. We’ve just gone through a university wide restructure so have created a base set of groups/lists to reflect this along similar lines to you and are now
wondering what to do about more bespoke requests (one option is just telling them no I guess
J ).
We’d initially wanted to devolve creation of groups/lists to our users but they use such a wide variety of operating systems and browsers that the IE dependent FIM portal is totally unusable for many of them.
We had a look at Condrey Groupsymmetry but it can only operate directly against Active Directory. We don’t want to put all the attributes we’d need to build these groups into AD so would rather have something that could operate against a ‘private’ ADLDS
instance with all the necessary attributes. We’d then sync the resultant groups back to AD with FIM.
We’re very interested to hear what others are doing too.
Ian Swift
University of Dundee
From: Discussion for MS IDM tools liks ILM and FIM [mailto:[log in to unmask]]
On Behalf Of Akers, Steve
Sent: 13 November 2015 09:11
To: [log in to unmask]
Subject: Group management with FIM/MIM or other tools
Hi all,
I’m interested in how other people do group management, whether they use FIM/MIM or other utilities (such as Grouper). We’ve been using FIM and standard AD tools in combination, we use FIM mainly for automated / criteria based groups.
We have a base set of standard groups for things like “everyone in department X” or “all staff” which we can use for security or emailing but they’re very generic. Recently we’ve had a request for much more granular groups for security and distribution groups.
For example “all students on course X, studying module Y who started in academic year 2015”. With the number of courses and modules we have I can see this requiring 1000’s of groups. Though FIM is capable of doing these I’m wondering if it is the right tool
for the job as getting the groups set up (especially doing this in an automated way) doesn’t feel like an “out of the box” feature of FIM (what I mean by that is for example every time a new module appears in our student record system we automate the creation
of a new group in FIM that is set up as a criteria based). I know it is certainly possible by setting the XPath filter attribute etc but it does requires a fair bit of work. I’m also a little concerned about performance in the portal with 1000’s of criteria
based groups, we’ve had performance issues in the past.
I’m wondering whether FIM is the right way to go or whether we might be best off looking at a different tool / solution. I’m just interested in what other people are doing in this area.
Any feedback welcome.
KR
Steve
======================
Steve Akers
Senior Solutions Developer
Development and Integration Services
IT Services
University of Leicester
T: 0116 223 1703
E:
[log in to unmask]ac.uk
The University of Dundee is a registered Scottish Charity, No: SC015096