During the upgrade of FIM to MIM you might see this error during install. This sends chills down the back of any Identity engineer.

After further investigation of this error it is errors out on a MPR when we look at a this in SQL profiler we see the following exceptions :

Violation of PRIMARY KEY constraint 'PK_ManagementPolicyRuleAttribute'. Cannot insert duplicate key in object 'fim.ManagementPolicyRuleAttribute'. The duplicate key value is (2879, 105).

Looking at this error we see the MPR and the Item we are trying to insert. It is unclear why are are trying to add this a second time the Product group is looking into this to understand the impact

What we are trying to add :

Complete:

Looking at the MPR in the UI we see ‘IsAuthorization Activity’ is already added

Currently we see no issue with this exception, but ask folks to report back any items like the above so we can investigate.

Thank you

Identity and Security Team / AKA Support

• Technical Overview of Microsoft Forefront Identity Manager 2010 R2
• Preparing Identities for Cloud Services with Microsoft Forefront Identity Manager
• Microsoft Identity and Access Strategy
• Microsoft Office 365: Identity and Access Solutions
• Identity & Access and Cloud: Better Together

We have plenty of other session not yet delivered or not yet available so please come back and search for the identity related content next week. I will post a complete list sometime next week.

Search for Identity Session: https://channel9.msdn.com/Events/TechEd/NorthAmerica/2011?sort=sequential&direction=desc&term=Identity

Brjann

The Community Evaluation Program from the Management and Security team at Microsoft provides IT professionals a structured approach to evaluating System Center and Forefront products before their final release. Members of this program are able to evaluate early versions of products with guidance from the product team and by sharing of experiences and best practices among a community of peers.

We have now opened up registration for the FIM 2010 R2 CEP that is target to start later this summer.

For more information about the program and to register, please visit: https://connect.microsoft.com/site1211 or go directly to the FIM 2010 R2 CEP registration form

//Brjann

Full blog post here: https://blogs.msdn.com/b/card/archive/2011/05/16/announcing-the-wif-extension-for-saml-2-0-protocol-community-technology-preview.aspx

Bit more details from Vittorio Bertocci - https://blogs.msdn.com/b/vbertocci/archive/2011/05/16/attention-asp-net-developers-saml-p-comes-to-wif.aspx

// Brjann

The team has created a RSS feed that can help you keep up to date with the latest hotfixes. https://bit.ly/FIM2010HotfixRSS 

//Brjann

Try out the amazing identity training kit referred to in Vittorio's blog below or just browse through all the resources made available for you to learn more and test this cloud service.

Release announcement: https://blogs.msdn.com/b/windowsazureappfabric/archive/2011/04/11/announcing-the-commercial-release-of-windows-azure-appfabric-caching-and-access-control.aspx 

Blog post from Vittorio Bertocci with all the details about training resources as well as pointers to applications that have already implemented ACS https://blogs.msdn.com/b/vbertocci/archive/2011/04/11/the-new-acs-ships.aspx 

Extend your on premises AD to the cloud and enable partners to access your applications without taking on extra identity management

/Brjann

By design, each FIM service instance belongs to a logical group that consists of one or more FIM service instances, which is also known as FIM service partition.

If you have only one FIM service instance deployed to handle the all requests, it is possible that you experience processing latencies. Some operations can even exceed the default timeout values that are appropriate for self-service operations.
FIM service partitions can help you to address this issue.

Regardless of whether you have only one or multiple FIM service instances deployed, your current FIM service partition configuration has an impact on how requests and associated workflows are processed in your environment.

The objective of this article is to explain, what FIM service partitions are, what you need to know about architectural components of a FIM service partition and how you can leverage and configure this feature to address latency related issues when processing requests in your environment.

Happy reading,
Markus

The center of our Identity and Access solutions is of course Active Directory so all session will look at extending on that platform with integration into cloud using technologies such as AD Federation Services in BI07 and Forefront Identity Manager in BI06.

BI05 Identity & Access and System Center: Better Together
System Center and IDA are integrated already and leveraging Active Directory but couldn’t you do more? This session talks about roles and identities in System Center products and how we can leverage IDA solutions. Demos of how can we use a tool such as Forefront Identity Manager in conjunction with the roles and access policies in System Center

BI06 Technical Overview of Forefront Identity Manager (FIM)
Join us for a lap around Forefront Identity Manager going through architecture, deployment and business scenarios in a presentation filled with demos. This session should give you a good understanding of what FIM is and what it can do to put you in control of identities across different directories and applications.

BI07 Technical Overview of Active Directory Federation Services 2.0
Join us for a lap around Active Directory Federation Services 2.0 covering architecture, deployment and business scenarios for using AD FS to extend single sign on from on-premises Active Directory to Office 365, Windows Azure and partners.

BI08 Identity & Access and Cloud: Better Together
Organizations have started using services such as Office 365 and Windows Azure but are worried about security and how to manage identities and provide access. This session goes through how Identity and Access from Microsoft with solutions such as Forefront Identity Manager, AD Federation Services, Windows Identity Foundation and Windows Azure AppFabric Access Control Services play together to enable organizations to access cloud applications and also enable access for their customers and partners.

Hope to see you in Las Vegas in a few weeks.

Brjann