Share via

FIM 2010: Installing BHold FIM Integration

  • Article

Introduction

This article will talk about installing BHold Integration for FIM. I found it the most challenging part of installing BHold, since it kept crashing for me.

After all, I figured out that it was all about the account we use to run the installation wizard, and the account details we provide during the installation. I will walk through an example that worked for me and might save someone some time and headache.

Steps

I was following this link to do the installation: http://technet.microsoft.com/en-us/library/jj134093%28v=ws.10%29.aspx

In my case I used one account to install all of the FIM component, including BHold core and FIM Service. This account was "MYDOMAIN\FIMAdmin". Therefore, this account will be the default FIM Administrator and BHold Core root user.

The link above contains a worksheet. This worksheet contains information about three accounts you will need to provide information for (domain, username and password) during installation:

  • BHold Core Service Account Settings: b1user
  • FIM Service Settings: a FIM Administrator not "MYDOMAIN\FIMAdmin"
  • BHold Connection Settings: a root user not "MYDOMAIN\FIMAdmin"

One of Microsoft's recommendations during the installation is not to supply the root user account information. In fact, if you did, the installation will fail. The failure happens during the customization part. This part is when the installation package starts to create objects in the FIM Service database, which include the new resource type "BHOLD_ROLE", workflows, sets, mprs, etc.

 

Note

If you have your FIM Service Management Agent, and BHold Access Connector configured in the synchronization engine, then you might have users in both sources (FIM Service and BHold). In this case, you can make one of those account a FIM administrator and a BHold root user.

In my case, I didn't, therefore, I had to manually create a user in FIM Service using the FIM Portal, then I used the following script to fix the objectSID.

http://social.technet.microsoft.com/Forums/en-US/54cb4f23-df98-4d11-a185-67e6d179a70a/using-powershell-to-fix-an-objectsid-on-a-portal-object

The account I created was "MYDOMAIN\FIMAdmin2".

In BHold, I had to manually create a root user. I performed the following steps:

  • In BHold Core Portal, Click on Organizational Units on the left hand side
  • Click on root Organization Unit (OU) /li>

http://3.bp.blogspot.com/-f5xVih7iZEc/Utw16GNVMfI/AAAAAAAAAHI/VHE-zWB_Yxs/s1600/BHold-FIM-Integration-Installation1.jpg

  • Expand Users, and click Add

http://2.bp.blogspot.com/-1L1SrK5P7cg/Utw1-EDXinI/AAAAAAAAAHc/NTAzsPg30Jo/s1600/BHold-FIM-Integration-Installation2.jpg

  • In the Create user screen, there are two required attributes (description and default alias), fill them as shown in the screenshot below

http://1.bp.blogspot.com/-frY3kYiHsxs/Utw19kgF2WI/AAAAAAAAAHY/ekcxS_woE6A/s1600/BHold-FIM-Integration-Installation3.jpg

  •  Click OK

You are now ready to start the installation for the FIM Integration. Use the "MYDOMAIN\FIMAdmin" account to launch the installation wizard, and make sure you run it as administrator.

During the installation, you will be asked to provide account details for BHold Core Service Account Settings, FIM Service Account Settings, and BHold Connection Settings. The table below summarizes the accounts you need:

 Type  Name
BHold Core Service Account Settings b1user
FIM Service Account Settings FIMAdmin2
BHold Connection Settings FIMAdmin2