Re-initialize FIM or MIM sync (when it uses the metaverse rules extension)

jakapongc
3 min readApr 17, 2023

If you have followed this link to synchronize Active Directory (AD) user accounts between AD forests, there is a way to restart (re-initialize) FIM or MIM sync.

Add a join rule

If it doesn’t exist, create a join rule on the destination AD connector. (Note: please choose your matching attribute appropriately.)

Start with clearing everything!!!

Disable the metaverse rules extension.

Delete connector space for both connections.

Now the metaverse database is empty.

Re-join (re-link) AD user accounts between AD forests

Run Full Import from the source AD connector.

Run Full Synchronization to project AD user objects from the source AD to FIM/MIM metaverse database.

Run Full Import from the destination AD connector.

Run Full Synchronization to join the objects (from the destination AD) to existing user objects in FIM/MIM metaverse database.

Now the objects between both AD forests are linked!!!

Finally, resume the operations

Enable metaverse rules extension.

And run the following operations by order:

  • Full Import (from the source AD)
  • Full Synchronization (from the source AD)
  • Export (to the destination AD)

In the end, ensure our scheduled task runs the following operations by order on a regular basis:

  • Delta Import (from source AD)
  • Delta Synchronization (from source AD)
  • Export (to the destination AD)

--

--