Verification Checklist for Cross-Forest Management Solution Using Forefront Identity Manager (FIM) 2010
Updated: June 3, 2010
Applies To: Forefront Identity Manager 2010
This following table details the verification steps that you need to perform to ensure that you have correctly deployed a cross-forest management solution by using Microsoft® Forefront® Identity Manager (FIM) 2010.
Section | Step | Completed? |
---|---|---|
Microsoft Office SharePoint® Server 2007 |
Configure Office SharePoint Server 2007 for multi-forest browsing. |
|
Office SharePoint Server 2007 |
Configure Office SharePoint Server 2007 for multi-forest access permissions. |
|
Forest configuration |
Create the Forest Configuration objects. |
|
Forest configuration |
Create the Forest Contacts sets. |
|
Forest configuration |
Create the Forest Foreign Security Principal (FSP) sets. |
|
Domain configuration |
Create the Domain Configuration objects. |
|
Workflow |
Create the Group Membership Validation workflow. |
|
Management policies |
Create the Group Membership Validation management policy rule (MPR). |
|
Schema |
Create the SidString attribute in FIM. |
|
Schema |
Bind SidString to User and Group in FIM. |
|
Schema |
Create the SidString attribute in the Synchronization Engine. |
|
Schema |
Bind the SidString attribute to person and group in the Synchronization Engine. |
|
Sets |
Create the AD DS Users provisioning set. |
|
Sets |
Create the AD DS Security Groups provisioning set. |
|
Sets |
Create the AD DS Distribution Groups provisioning set. |
|
Sets |
Create the AD DS User FSP provisioning set. |
|
Sets |
Create the AD DS Security Group FSP provisioning set. |
|
Sets |
Create the AD DS User Contact provisioning set. |
|
Sets |
Create the AD DS Distribution List Contact provisioning set. |
|
Sets |
Create the AD DS Mail-enabled Security Group Contact provisioning set. |
|
Synchronization rule |
Create the AD DS Users synchronization rule. |
|
Synchronization rule |
Create the AD DS Security Groups synchronization rule. |
|
Synchronization rule |
Create the AD DS Distribution Groups synchronization rule. |
|
Synchronization rule |
Create the AD DS User FSP synchronization rule. |
|
Synchronization rule |
Create the AD DS Security Group FSP synchronization rule. |
|
Synchronization rule |
Create the AD DS User Contact synchronization rule. |
|
Synchronization rule |
Create the AD DS Distribution List Contact synchronization rule. |
|
Synchronization rule |
Create the AD DS Mail-enabled Security Group Contact synchronization rule. |
|
Workflow |
Create the AD DS Users workflow. |
|
Workflow |
Create the AD DS Security Groups workflow. |
|
Workflow |
Create the AD DS Distribution Groups workflow. |
|
Workflow |
Create the AD DS User FSP workflow |
|
Workflow |
Create the AD DS Security Group FSP workflow. |
|
Workflow |
Create the AD DS User Contact workflow. |
|
Workflow |
Create the AD DS Distribution List Contact workflow. |
|
Workflow |
Create the AD DS Mail-enabled Security group Contact workflow. |
|
Management policies |
Create the AD DS Users MPR. |
|
Management policies |
Create the AD DS Security Groups MPR. |
|
Management policies |
Create the AD DS Distribution Groups MPR. |
|
Management policies |
Create the AD DS User FSP MPR. |
|
Management policies |
Create the AD DS Security Group FSP MPR. |
|
Management policies |
Create AD DS User Contact MPR. |
|
Management policies |
Create the AD DS Distribution List Contact MPR. |
|
Management policies |
Create AD DS Mail-enabled Security group Contact MPR. |