Adding Delta Sync Support to the Microsoft Identity Manager PowerShell Managemen ...

31st of October, 2018 / Darren (Doc) Robinson / No Comments

Recently I posted a sample Microsoft Identity Manager Management Agent for Workday HR. Subsequently I also posted about some updates I made to the WorkdayAPI PowerShell Module to enable functionality to specify the time period to return changes for. This post details updating my sample Workday Management Agent to support Delta Synchronisation.

WorkdayAPI PowerShell Module

First up you will need the updated WorkdayAPI PowerShell Module that provides the Get-WorkdayWorkerAdv cmdlet and can take a time period to return information for. Get the updated WorkdayAPI PowerShell Module from here

Update the PowerShell Module on the MIM Sync Server. The module by default will be in the C:\Program Files\windowsPowerShell\Modules\WorkdayApi folder.

You will need to unblock the new files.

Get-ChildItem 'C:\Program Files\WindowsPowerShell\Modules\WorkdayApi' | Unblock-File
Get-ChildItem 'C:\Program Files\WindowsPowerShell\Modules\WorkdayApi\scripts' | Unblock-File Updated Schema

In the updated Management Agent I’m also bringing into MIM additional attributes from the other enhancements I made to the PowerShell Module for HireDate , StartDate , EndDate , Supplier and WorkdayActive . The updates to the Schema.ps1 are shown below.

$obj | Add-Member -Type NoteProperty -Name "<strong>HireDate</strong>|string" -Value "string"
$obj | Add-Member -Type NoteProperty -Name "<strong>StartDate</strong>|string" -Value "string"
$obj | Add-Member -Type NoteProperty -Name "<strong>EndDate</strong>|string" -Value "string"
$obj | Add-Member -Type NoteProperty -Name "<strong>Supplier</strong>|string" -Value "string"
$obj | Add-Member -Type NoteProperty -Name "<strong>WorkdayActive</strong>|Boolean" -Value $True

The full updated Schema Script is below;

With the Schema Script updated, refresh the Management Agent Schema.


Adding Delta Sync Support to the Microsoft Identity Manager PowerShell Managemen ...

You can then select the new attributes in the Workday MA under Select Attributes .


Adding Delta Sync Support to the Microsoft Identity Manager PowerShell Managemen ...

Then select Ok .


Adding Delta Sync Support to the Microsoft Identity Manager PowerShell Managemen ...
Updated Import Script

The Import Script has a number of changes to handle creating and updating a WaterMark File that is used to store the date stamp of the last run. Also updated in the Import Script is the change to use the Get-WorkdayWorkerAdv cmdlet over the Get-WorkdayWorker cmdlet so that a time period can be specified, and to retrieve the additional attributes we just added to the schema.

Update: Line 11 for the path and name of the Watermark File you wish to use Line 31 for the URI of your Workday Tenant Executing the Management Agent using a Delta Import Delta Sync Run Profile

After creating a Delta Import Delta Sync Run Profile we can now run a Delta Sync. The following graphic is after seeding the WaterMark file (with the last run time in a format like this 2018-10-29T22:09:08.3628953+00:00 ), as by default without the WaterMark file being present a Full Import is performed by the MA as it doesn’t have a watermark to base the import time period on.

The changed records in Workday HR are then identified and those records obtained, imported and synchronised via the Management Agent.


Adding Delta Sync Support to the Microsoft Identity Manager PowerShell Managemen ...
Summary

Using Delta Synchronisation functionality from Workday HR allows for much quicker synchronsiation from Workday HR to Microsoft Identity Manager.

Like this:

Like Loading...

Related

Category:

FIM , Identity and Access Management , PowerShell

Tags:

FIM , granfeldt , MIM , Powershell , Workday

Previous Post: Bulk import users into Azure AD B2C tenant with custom attributes

本文系统(windows)相关术语:三级网络技术 计算机三级网络技术 网络技术基础 计算机网络技术

代码区博客精选文章
分页:12
转载请注明
本文标题:Adding Delta Sync Support to the Microsoft Identity Manager PowerShell Managemen ...
本站链接:https://www.codesec.net/view/611345.html


1.凡CodeSecTeam转载的文章,均出自其它媒体或其他官网介绍,目的在于传递更多的信息,并不代表本站赞同其观点和其真实性负责;
2.转载的文章仅代表原创作者观点,与本站无关。其原创性以及文中陈述文字和内容未经本站证实,本站对该文以及其中全部或者部分内容、文字的真实性、完整性、及时性,不作出任何保证或承若;
3.如本站转载稿涉及版权等问题,请作者及时联系本站,我们会及时处理。
登录后可拥有收藏文章、关注作者等权限...
技术大类 技术大类 | 系统(windows) | 评论(0) | 阅读(116)