For this procedure, you can enable and specify a metaverse rules extension in Microsoft® Forefront Identity Manager (FIM) 2010. With metaverse rules extensions, you have more flexibility in managing identity data between a connector space and the metaverse. For example, a metaverse rules extension can perform account provisioning, creating, renaming, and deprovisioning connector space objects. To complete this procedure, you must be logged on as a member of the FIMSyncAdmins security group.

To enable metaverse rules extensions
  1. In Synchronization Service Manager, on the Tools menu, click Options.

  2. In Options, select Enable Metaverse Rules Extension.

  3. In Rules extension name, type the name of the rules extension, or click Browse to locate the rules extension.

  4. To run the rules extension in a separate process, select Run this rules extension in a separate process.

  5. To enable account management through rules extensions, select Enable Provisioning Rules Extension.

  6. To reset server configuration settings to their default state, click Reset.

  7. To create a new rules extension project in Visual Basic .NET or Visual C#.NET, click Create Rules Extension Project, select a programming language, and then type a project name and project location.

  8. To unload a metaverse rules extension if a single object operation exceeds the specified amount of time, log an error and continue to the next object, in Global Rules Extension Settings, select Unload extension if the duration of a single operation exceeds, and then select a time in seconds. This time limit will also apply to management agent rules extensions.


When you run a rules extension, it must exist in the extensions folder of the FIM root directory, which by default is C:\Program Files\Microsoft Forefront Identity Server\2010\Synchronization Service\Extensions.


By default, a metaverse rules extension will run in the same memory space as the Forefront Identity Manager Service. This improves overall performance by consuming less memory space, but if the rules extension process fails, it may cause a disruption to the Forefront Identity Manager Service. Running a rules extension in a separate memory space can reduce the risk of a rules extension process affecting the Forefront Identity Manager Service, but decreases overall performance by increasing the amount of memory space needed.

See Also