For over a decade, the Granfeldt PowerShell Management Agent (PSMA) has been the bedrock for bespoke identity integration within Microsoft Identity Manager (MIM) and its predecessor, Forefront Identity Manager. It provides the essential bridge between the MIM Synchronisation Service and virtually any target system accessible via PowerShell.… keep reading
Tips for Entra ID On-Premises Provisioning with ECMA2 Connectors
In my last post I detailed how to configure the Granfeldt PowerShell Management Agent as an ECMA2 connector with the Entra ID Provisioning Service. This post details a few tips for configuring and developing solutions that use ECMA2 connectors.
Microsoft Identity Manager Management Agent Configuration Methods Comparison
First though here is a table of configuration items and a comparison between the MIM Sync Service, MIM Portal & Service and Entra ID Provisioning with ECMA connectors.… keep reading
Entra ID On-premises ECMA Provisioning with the Granfeldt PowerShell Management Agent
This post feels a lot like I got in a time machine and went back in time. Historically I’ve designed, built and deployed a lot of custom Forefront / Microsoft Identity Manager Management Agents. A lot of them using the Granfeldt PowerShell Management Agent thanks to is flexibility and usability.… keep reading
A Dynamics 365 Finance & Operations Management Agent for Microsoft Identity Manager
As I mentioned in a recent post I’ve recently dived back into Microsoft Identity Manager. The focus of this post is some development I recently did to build a Microsoft Dynamics 365 Finance & Operations Management Agent for Microsoft Identity Manager.… keep reading
Using the new Granfeldt FIM/MIM PowerShell Management Features
Last week Søren Granfeldt released the first update to his hugely popular Granfeldt FIM/MIM PowerShell Management in over 2 years. This post looks at the latest release and using the new Granfeldt FIM/MIM PowerShell Management Features.
The new features are:
- A new option to specify an auxiliary set of credentials that is passed to scripts.
Sending Granfeldt PowerShell Management Agent Events to the Windows Application Event Log
It has been a while since I wrote a Microsoft Identity Manager or even a Granfeldt PowerShell Management Agent related post. Primarily because it has been quite some time since I have done any development for MIM. The last few weeks though I have, and I wanted to output PowerShell Management Agent Events to the Windows Application Event Log.… keep reading
Multi-Threading Granfeldt PowerShell Management Agent Imports
As I’m sure you are familiar (with my many posts on the topic), the Granfeldt PowerShell Management Agent is extremely flexible. When used to integrate Microsoft Identity Manager with modern REST API’s it is easy to retrieve pages of results from a REST API and process the objects through the Management Agent.… keep reading
An Azure MFA Management Agent for User MFA Reporting using Microsoft Identity Manager
Microsoft as part of the uplift in Authentication Methods capability have extended the Graph API to contain User Azure MFA information. My customers have been requesting MFA User Reporting data for some time. How many users are registered for Azure MFA?… keep reading
A Rudimentary RACF Management Agent for Microsoft Identity Manager
A RACF Management Agent for Microsoft Identity Manager ? Isn’t there one in the box? No. Host Integration Management Agents were deprecated when Microsoft released Forefront Identity Manager as the successor to Identity Lifecycle Manager (ILM). I understand it was partly due to lack of demand for the integration, and the reliance on Host Integration Server (HIS) along with the move in operating system support 32-bit (in ILM) to 64-bit (in FIM).… keep reading
Microsoft Identity Manager PowerShell Management Agent for Oracle Internet Directory
Why a FIM/MIM PowerShell Management Agent for Oracle Internet Directory? Why not just use the Generic LDAP Connector for Microsoft Identity Manager? I needed an integration solution that was able to update an Oracle Database behind Oracle Internet Directory. That meant I required a solution that was able to use LDAP to get visibility as to who/what was in OID, but then make updates into an Oracle DB.… keep reading

