Prerequisites
Last updated
Last updated
AutoSync requires the following software components to work correctly
Microsoft .NET Framework 4.6.1 or later
Microsoft Forefront Identity Manager 2010 R2 version 4.1.3441 or later
PowerShell 3.0 or later
The AutoSync service can only be installed on the same server as the FIM Synchronization Service
A key feature of AutoSync is that it will run only the operations that are needed, when they are needed. In order to do so, AutoSync needs to be able to have full control over the specific run profiles that are being executed.
AutoSync does not support multi-step run profiles for automatic operations
If you do not have single-step run profiles created for your MAs, you will need to create them. Run profile names are not important (AutoSync will find them no matter what they are called), but the following can be used if you are stuck for ideas.
Name | Type |
---|---|
AutoSync will detect management agents without import or export profiles, and appropriately treat them as read-only or write-only management agents.
AutoSync requires a standard user service account that has the following permissions
Membership in the FIMSyncAdmins group
Optionally, if a MIM Service MA is in use, and change detection is required, the service account must have permissions to read from the request history. Read permissions on the msidmCompletedTime
attribute of all 'Request' objects is required. When configuring the change detection trigger for the MIM Service MA, there is an option to create the sets and MPRs required automatically.
DI
Delta import
FI
Full import
DS
Delta synchronization
FS
Full synchronization
EALL
Export (all items)