Recently two on my Connectors (MA) does not show as a link for a user.  How do I troubleshoot this?, and why would an lose a connector?

I seem to have triggered this error message in multiple MAs (management agents) "sync-rule-invalid-xml-attribute-flow" for multiple user objects in a small AD test environment. But only one attribute that looks normal in the sync engine is appearing which have never caused problems in this test environment before. 

I also get CS to MV to CS synchronization failed 0x80230554 on the AD MA.

Same for FIMMA. and with 2 other core MAs and then references what looks to be a Sync Rule GUID out on the FIMService. 

I'm at a loss as to how to track this down. Luckily its a test environment, so I can do my worst and hopefully learn or help someone out. Thanks

Dear All,

the certificate used for MIM service got expired. How to renew or use other certificate for MIM service?

Thanks,

Shashidhar

    I am having a problem registering on the Password Registration Portal. I can login and proceed to answer the security questions. When i click next after answering all the questions I get an error on browser

An error has occurred. Please try again, and if the problem persists, contact your help desk or system administrator. (Error 3008)

3 events are also logged in the Event Viewer on the Portal Server. (SEE BELOW)

I am able to connect to the fimservice2 from browser on Portal server using the URLs : http://fimservice2.idmad.lab:5725 and http://fimservice2.idmad.lab:5726. So I think its not network or firewall problem. I have included the relevant information below. Please let me know if you need any more information.

Environment :

Windows Server 2012 , FIM 2010 R2 SP1, Sharepoint 2013 Foundation.

FIM Portal, Password Registration and Reset portals are all on a separate server than FIM Service. FIM Portal is working fine.

SPNS:

CN=FIM PWService,OU=FimServiceAccounts,OU=FIMAdmin,OU=FimLab2,DC=idmad,DC=lab

HTTP/fimreset
HTTP/fimreset.idmad.lab
HTTP/fimreg.idmad.lab
HTTP/fimreg
-----------
CN=FIM Service,OU=FimServiceAccounts,OU=FIMAdmin,OU=FimLab2,DC=idmad,DC=lab

FIMService/fimservice2
FIMService/fimservice2.idmad.lab
-----------
CN=FIM SPPool,OU=FimServiceAccounts,OU=FIMAdmin,OU=FimLab2,DC=idmad,DC=lab

HTTP/fimportal2
HTTP/fimportal2.idmad.lab

Web.config for Password Registration Portal :

  <resourceManagementClient resourceManagementServiceBaseAddress="http://fimservice2.idmad.lab:5725" timeoutInMilliseconds="60000" />

Microsoft.ResourceManagement.Service.exe.config file :

  <service name="Microsoft.ResourceManagement.WebServices.ResourceManagementService">
        <host>
          <baseAddresses>
            <add baseAddress="http://localhost:5725" />
          </baseAddresses>
        </host>
      </service>
      <service name="Microsoft.ResourceManagement.WebServices.SecurityTokenService">
        <host>
          <baseAddresses>
            <add baseAddress="http://localhost:5726" />
          </baseAddresses>
        </host>
      </service>
    </services>
  </system.serviceModel>
  <resourceManagementClient resourceManagementServiceBaseAddress="fimservice2.idmad.lab" />
  <resourceManagementService externalHostName="fimservice2.idmad.lab" />

3 events in Event log on the portal server:

EVENT 1

Failure to connect to FIM Service
The web portal failed to connect to the FIM Service.

Ensure that (1) the FIM Service is running, (2) the FIM Service server address is correct in the web.config file on the web portal, and (3) that network connectivity is available between the web portal and the FIM Service over the designated port.
Details:
System.ServiceModel.CommunicationException: An error occurred while receiving the HTTP response to http://fimservice2.idmad.lab:5726/ResourceManagementService/SecurityTokenService/Registration. This could be due to the service endpoint binding not using the HTTP protocol. This could also be due to an HTTP request context being aborted by the server (possibly due to the service shutting down). See server logs for more details. ---> System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a receive. ---> System.IO.IOException: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host. ---> System.Net.Sockets.SocketException: An existing connection was forcibly closed by the remote host
   at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
   --- End of inner exception stack trace ---
   at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
   at System.Net.PooledStream.Read(Byte[] buffer, Int32 offset, Int32 size)
   at System.Net.Connection.SyncRead(HttpWebRequest request, Boolean userRetrievedStream, Boolean probeRead)
   --- End of inner exception stack trace ---
   at System.Net.HttpWebRequest.GetResponse()
   at System.ServiceModel.Channels.HttpChannelFactory.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
   --- End of inner exception stack trace ---

Server stack trace:
   at System.ServiceModel.Channels.HttpChannelUtilities.ProcessGetResponseWebException(WebException webException, HttpWebRequest request, HttpAbortReason abortReason)
   at System.ServiceModel.Channels.HttpChannelFactory.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
   at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Channels.SecurityChannelFactory`1.SecurityRequestChannel.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Channels.ContextRequestChannel.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Dispatcher.RequestChannelBinder.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
   at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)

Exception rethrown at [0]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at Microsoft.ResourceManagement.WebServices.WSTrust.ISecurityTokenService.RequestSecurityTokenResponse(Message request)
   at Microsoft.ResourceManagement.WebServices.SecurityTokenServiceClient.RequestSecurityTokenResponse(Message request)
   at Microsoft.ResourceManagement.WebServices.SecurityTokenServiceClient.RequestSecurityTokenResponse(RequestSecurityTokenResponseType request, ClientOptionsHelper clientOptionsHelper, MessageBuffer& messageBuffer)
   at Microsoft.ResourceManagement.WebServices.Client.AuthenticationRequiredException.Authenticate(AuthenticationChallengeResponseType[] authenticationChallengeResponses, MessageBuffer& messageBuffer, ClientOptionsHelper clientOptionsHelper)
   at Microsoft.IdentityManagement.CredentialManagement.Portal.Common.RegistrationProxy.GetNextChallenge(String domain, String username, ChallengeContext gateChallengeResponse, FaultExceptionHandlerDelegate faultExceptionHandler)
Web Portal: FIM Password Registration Portal
Session Id: qoind5aknc1xmn55ho033qn0
IP Address: 10.0.44.44

EVENT 2

Microsoft.IdentityManagement.CredentialManagement.Portal: System.Web.HttpUnhandledException: ScriptManager_AsyncPostBackError ---> Microsoft.IdentityManagement.CredentialManagement.Portal.Exceptions.GenericCommunicationException: An error occurred while receiving the HTTP response to http://fimservice2.idmad.lab:5726/ResourceManagementService/SecurityTokenService/Registration. This could be due to the service endpoint binding not using the HTTP protocol. This could also be due to an HTTP request context being aborted by the server (possibly due to the service shutting down). See server logs for more details. ---> System.ServiceModel.CommunicationException: An error occurred while receiving the HTTP response to http://fimservice2.idmad.lab:5726/ResourceManagementService/SecurityTokenService/Registration. This could be due to the service endpoint binding not using the HTTP protocol. This could also be due to an HTTP request context being aborted by the server (possibly due to the service shutting down). See server logs for more details. ---> System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a receive. ---> System.IO.IOException: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host. ---> System.Net.Sockets.SocketException: An existing connection was forcibly closed by the remote host
   at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
   --- End of inner exception stack trace ---
   at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
   at System.Net.PooledStream.Read(Byte[] buffer, Int32 offset, Int32 size)
   at System.Net.Connection.SyncRead(HttpWebRequest request, Boolean userRetrievedStream, Boolean probeRead)
   --- End of inner exception stack trace ---
   at System.Net.HttpWebRequest.GetResponse()
   at System.ServiceModel.Channels.HttpChannelFactory.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
   --- End of inner exception stack trace ---

Server stack trace:
   at System.ServiceModel.Channels.HttpChannelUtilities.ProcessGetResponseWebException(WebException webException, HttpWebRequest request, HttpAbortReason abortReason)
   at System.ServiceModel.Channels.HttpChannelFactory.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
   at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Channels.SecurityChannelFactory`1.SecurityRequestChannel.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Channels.ContextRequestChannel.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Dispatcher.RequestChannelBinder.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
   at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)

Exception rethrown at [0]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at Microsoft.ResourceManagement.WebServices.WSTrust.ISecurityTokenService.RequestSecurityTokenResponse(Message request)
   at Microsoft.ResourceManagement.WebServices.SecurityTokenServiceClient.RequestSecurityTokenResponse(Message request)
   at Microsoft.ResourceManagement.WebServices.SecurityTokenServiceClient.RequestSecurityTokenResponse(RequestSecurityTokenResponseType request, ClientOptionsHelper clientOptionsHelper, MessageBuffer& messageBuffer)
   at Microsoft.ResourceManagement.WebServices.Client.AuthenticationRequiredException.Authenticate(AuthenticationChallengeResponseType[] authenticationChallengeResponses, MessageBuffer& messageBuffer, ClientOptionsHelper clientOptionsHelper)
   at Microsoft.IdentityManagement.CredentialManagement.Portal.Common.RegistrationProxy.GetNextChallenge(String domain, String username, ChallengeContext gateChallengeResponse, FaultExceptionHandlerDelegate faultExceptionHandler)
   --- End of inner exception stack trace ---
   at Microsoft.IdentityManagement.CredentialManagement.Portal.Common.RegistrationProxy.GetNextChallenge(String domain, String username, ChallengeContext gateChallengeResponse, FaultExceptionHandlerDelegate faultExceptionHandler)
   at Microsoft.IdentityManagement.CredentialManagement.Portal.Components.DriverBase.GetNextGate(IGateControl currentGate)
   at Microsoft.IdentityManagement.CredentialManagement.Portal.Registration.Next()
   at System.Web.UI.WebControls.Button.OnClick(EventArgs e)
   at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument)
   at System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument)
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
   --- End of inner exception stack trace ---
   at Microsoft.IdentityManagement.CredentialManagement.Portal.Site.ScriptManager_AsyncPostBackError(Object sender, AsyncPostBackErrorEventArgs eventArgs)
   at System.Web.UI.ScriptManager.OnAsyncPostBackError(AsyncPostBackErrorEventArgs e)
   at System.Web.UI.PageRequestManager.OnPageError(Object sender, EventArgs e)
   at System.Web.UI.TemplateControl.OnError(EventArgs e)
   at System.Web.UI.Page.HandleError(Exception e)
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
   at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
   at System.Web.UI.Page.ProcessRequest()
   at System.Web.UI.Page.ProcessRequest(HttpContext context)
   at ASP.default_aspx.ProcessRequest(HttpContext context)
   at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

EVENT 3

The error page was displayed to the user.
Details:
Title: Communication Error
Message: An error has occurred. Please try again, and if the problem persists, contact your help desk or system administrator. (Error 3008)
Source:
Attributes:
Details: Microsoft.IdentityManagement.CredentialManagement.Portal.Exceptions.GenericCommunicationException: An error occurred while receiving the HTTP response to http://fimservice2.idmad.lab:5726/ResourceManagementService/SecurityTokenService/Registration. This could be due to the service endpoint binding not using the HTTP protocol. This could also be due to an HTTP request context being aborted by the server (possibly due to the service shutting down). See server logs for more details. ---> System.ServiceModel.CommunicationException: An error occurred while receiving the HTTP response to http://fimservice2.idmad.lab:5726/ResourceManagementService/SecurityTokenService/Registration. This could be due to the service endpoint binding not using the HTTP protocol. This could also be due to an HTTP request context being aborted by the server (possibly due to the service shutting down). See server logs for more details. ---> System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a receive. ---> System.IO.IOException: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host. ---> System.Net.Sockets.SocketException: An existing connection was forcibly closed by the remote host
   at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
   --- End of inner exception stack trace ---
   at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
   at System.Net.PooledStream.Read(Byte[] buffer, Int32 offset, Int32 size)
   at System.Net.Connection.SyncRead(HttpWebRequest request, Boolean userRetrievedStream, Boolean probeRead)
   --- End of inner exception stack trace ---
   at System.Net.HttpWebRequest.GetResponse()
   at System.ServiceModel.Channels.HttpChannelFactory.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
   --- End of inner exception stack trace ---

Server stack trace:
   at System.ServiceModel.Channels.HttpChannelUtilities.ProcessGetResponseWebException(WebException webException, HttpWebRequest request, HttpAbortReason abortReason)
   at System.ServiceModel.Channels.HttpChannelFactory.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
   at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Channels.SecurityChannelFactory`1.SecurityRequestChannel.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Channels.ContextRequestChannel.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Dispatcher.RequestChannelBinder.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
   at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)

Exception rethrown at [0]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at Microsoft.ResourceManagement.WebServices.WSTrust.ISecurityTokenService.RequestSecurityTokenResponse(Message request)
   at Microsoft.ResourceManagement.WebServices.SecurityTokenServiceClient.RequestSecurityTokenResponse(Message request)
   at Microsoft.ResourceManagement.WebServices.SecurityTokenServiceClient.RequestSecurityTokenResponse(RequestSecurityTokenResponseType request, ClientOptionsHelper clientOptionsHelper, MessageBuffer& messageBuffer)
   at Microsoft.ResourceManagement.WebServices.Client.AuthenticationRequiredException.Authenticate(AuthenticationChallengeResponseType[] authenticationChallengeResponses, MessageBuffer& messageBuffer, ClientOptionsHelper clientOptionsHelper)
   at Microsoft.IdentityManagement.CredentialManagement.Portal.Common.RegistrationProxy.GetNextChallenge(String domain, String username, ChallengeContext gateChallengeResponse, FaultExceptionHandlerDelegate faultExceptionHandler)
   --- End of inner exception stack trace ---
   at Microsoft.IdentityManagement.CredentialManagement.Portal.Common.RegistrationProxy.GetNextChallenge(String domain, String username, ChallengeContext gateChallengeResponse, FaultExceptionHandlerDelegate faultExceptionHandler)
   at Microsoft.IdentityManagement.CredentialManagement.Portal.Components.DriverBase.GetNextGate(IGateControl currentGate)
   at Microsoft.IdentityManagement.CredentialManagement.Portal.Registration.Next()
   at System.Web.UI.WebControls.Button.OnClick(EventArgs e)
   at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument)
   at System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument)
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
CorrelationId:
RequestId:
ErrorCode: 3008
CaughtTime: 07/10/2013 10:12:55

Web Portal: FIM Password Registration Portal
Session Id: qoind5aknc1xmn55ho033qn0
IP Address: 10.0.44.44

Hi,

I'm using a customExpression on a WF Activity (Function Evaluator Activity)

On the Custom Expression, I'm using this:

LowerCase(CompanyCode+"-"+FirstName+"."+LastName)

Now I need to ensure that I don´t exceed 19 chars in the output string len. How Can I do that?

Any kind of substring Function? I did not find it here https://docs.microsoft.com/en-us/previous-versions/mim/ff800820(v=ws.10)?redirectedfrom=MSDN

Thanks,

JD

Hey Everyone, 

tough question here, 

do you know if i use there is way to push a reference value to a portal attribute

i have the agency which is a reference lookup, and i d like to automatically set it to a single value for certain users.

i was thinkng of using a the function evaluator workflow but i dont know how to set the value since its a reference not a string...

thanks for the help

Hitch Bardawil

Hi,
Our PAM installation is having some issues with the cleanup of expired PAM requests.
This makes the PAM Portal extremely slow(Some experience timeout on the web page).
We make due with running a custom powershell script which deletes expired Pam Requests, but it would be preferable if the service did so itself, like it's supposed to do.

We get a lot of these events in the Priveleged Access Management EventLog:
Event 866 - Failed to run PAM expired requests handler
And we've narrowed it down to being the PAM Monitoring Service.

We've seen the exact same issue on a seperate PAM installation which makes me think this might be a bug and not a configuration error.

Any ideas of how we can make this work like it should?

I have an MvExtension DLL that provisions new AD accounts. When I do a full sync from the FIM Service MA it fails with the error "Attribute "uid" is not present". Attribute uid is present in the MA Person attribute flows. A full sync from the SQL MA works. Is there something special about the FIM Service (portal) MA?

thanks,

Alistair

All,

Our active directory was all messed up for various reasons. The server team did a fresh install of the active directory. I had to go through hoops and was able to re-install MIM and MIM Portal. Initially, I was not able to login to the MIM portal as the SID to my account had changed. I updated the SID to the current value in Active Directory in the database and got it to work.

However now the Synchronization Service Management Agent is giving problems. I am getting no-start-partition-delete error. What is the best way for me to overcome this barrier? Any help will be greatly appreciated.

Grace and Peace,

Sylvester

Hello,

i'm new to MIM 2016 and i've just tried to sync data from AD DS  to my LDS with MIM.
Since I have data on my Metaverse coming from my AD connector space, I created a Metaverse Rules Extension (enabled it with provisionning rules extension),  to try to get my data into my LDS without success. I May be missing something.
Oh and i forgot to say i would like to make it with MIM 2016 (not adamsync or another), and without sharepoint installation :). Is there an easy way or kind of walkthrough to do this ? What are the mandatory methods inside the metaverse rule extension to make it work ?
when I try to run a full import on my LDS i only have empty containers, not data supposed to be inside (users).

Any help would be appreciated thanks.

The current MIM is deployed on VMWare servers, the plan is to migrate them to Azure VMs. 

What would be the strategy, Can we do this through snapshots or deploy and install the MIM from beginning.

Thanks,

Gouthami 

Hi MIM People,

I've been configuring the MIMWAL update resource workflow and don't have any problems however it occurred to me that I don't know what Value Expressions functions are available and I can't find any documentation on it. I know there is InsertValues() and RemoveValues() and Null(). What other functions are allowed in the Value Expressions field and/or where can I find some documentation on them?

Cheers

hello All,

users are not listing in below screen:



Please help to resolve the MIM sync issue

1. Users are fully imported from AD to MIM And Users are visible in metaverse search.



3. These users are not appearing in sharePoint Central Admin even though Agent run successfully

management agents are created and configured, SharePoint service account is given correct permission on user profile service and DB. MIM service account  also given required permission

Please assist

Dear All,

How to get notification when dis-connected accounts connected with MV. ?

scenario: when users DOL expires in HR database, they are dis-connected from other connectors and deleted from MV. in some case unknowingly these accounts re-activated in HR database. So HR connector recreates these accounts in MV and joins in other connectors. how to fetch these accounts for audit purpose. 

Thanks in Advance.

Shashidhar Joliholi

Hi All,

First time I use this forum :-0, anyhow I have a problem that I cannot get done in powershell.

I try to export all users with a prefix and their connected groups, meaning sAMaccountname, ADgroupname.

Get-ADUser -Filter {sAMAccountName -like "xx*" -and enabled -eq $true} | select sAMAccountName | foreach-object {
Get-ADPrincipalGroupMembership $_.SamAccountName | select name}

This script just provides me the groupname of all group of the users stating with XX, could somebody help me to get the SamAccountName & The groupname as output to excel?

Many times thanks!

Greets,

Mathijs

Hi All,

I am using MIM synchronization Service only and AAD connect for identity Management. Like to know how the license for this product is subscribed.

My clients have Azure Premium(P1) License as subscription. But still I need license separately. Can anyone help with below queries. 

I am not using MIM Portal, Service and SSPR. 

 Do customers required to buy individual license for MIM Synchronization Service?

-         Do customers required to buy individual license for AAD Connect?

-         MIM and AAD connect license is part of Azure Premium license? Will both Azure P1 and Azure P2 is applicable?

-          If MIM and AAD is part of Azure subscription, do we required to pay any separate subscriptions for MIM and AAD for Monthly/Yearly usage?

Regards

Sridhar

Sridhar

Is there a list available somewhere of all possible status values for a request. I know there's 'completed' and 'PostProcessingError' for example but what are all the possible values for this field?

Would someone point me to some documentation about using SSL with Active Directory MAs?

I am trying to answer some questions about how to set up the MA connection using SSL and how secure the default "Sign and Encrypt LDAP Traffic" option is.

I'm very novice about certificates, so I would like to find out what kind of certs can be used and if it can be from an internal PKI when syncing with another company's AD or if it need to be from a trusted root like Entrust.

I am trying to find out if Server 2019 could be considered a supported server for MIM 2016 SP1 with SharePoint 2016. Microsoft does not list Server 2019 as supported server for SP1. Is that because of the Synchronization service? SharePoint 2016 is supported on Server 2019, so I am guessing MIM Portal & Service might be ok.

My rational here is that I don't want to move to SP2 just yet, but I would like to get my server infrastructure in place, so all I have to do later on is to apply the patch.