A

anchor

One or more unique attributes of an object type that does not change and represents an object in the connected data source to which the connector space object is linked (for example, an employee number or a user ID).

See also: attribute; connected data source; connector space object

application directory partition

An Active Directory directory partition that stores application-specific data that can be dynamic (subject to Time to Live restrictions). Application directory partitions can store any type of object except security principals and are not replicated to the global catalog. The replication scope of an application directory partition can be configured to include any set of domain controllers in the forest.

attribute

A property of an object. The schema defines which attributes an object must have and which additional attributes it might have.

See also: anchor; attribute flow; object; schema

attribute flow

The synchronization of attributes between objects in connected data sources, the connector space, and the metaverse. This process can involve the application of rules extensions and filters, and the modification of attributes.

See also: attribute flow precedence; attribute flow rules; connected data source; connector space; metaverse; object

attribute flow precedence

The order in which two or more import attribute flow rules that exist for a single metaverse attribute are evaluated. For example, using direct mapping, attribute flow rule A sets a value from source attribute person:name to metaverse destination attribute person:name, and attribute flow rule B sets a value from source attribute user:firstname to metaverse destination attribute person:name. An attribute flow precedence rule can state that attribute flow rule A takes precedence over attribute flow rule B. When the import attribute flow rules are evaluated, the metaverse destination attribute value for person:name is set by first applying attribute flow rule A. If no value is set by attribute flow rule A, the value is set by attribute flow rule B.

See also: attribute flow; attribute flow rules; management agent; metaverse

attribute flow rules

Rules that determine the process of synchronizing attributes between objects in connected data sources, the connector space, and the metaverse.

See also: attribute flow; attribute flow precedence; connected data source; connector space; metaverse; object

attribute mapping

The specification of unidirectional relationships between connector space and metaverse attributes. You use attribute mappings to define attribute flow rules.

See also: attribute flow; attribute flow rules; connector space; constant mapping; direct mapping; metaverse

attribute-value pair (AVP)

Data that consists of a single attribute followed by the attribute's value, which is separated by a colon (for example, name:Fred). This does not apply to all management agent types.

AVP

See definition for: attribute-value pair (AVP)

B

There are no glossary terms that begin with this letter.

C

call-based management agent

Any management agent that uses a real-time connection to the data source to import or export data.

See also: connected data source; management agent

change type attribute

An attribute applicable to text file and database management agents that denotes the type of change (that is, add, modify, or delete) to be made to a connector space object.

See also: attribute; connector space object; management agent

collation

A set of rules that determines how data is compared, ordered, and presented. Character data is sorted using collation information, including locale, sort order, and case-sensitivity.

connected data source

A directory, database, file, or other data repository.

See also: identity information; metaverse; synchronization

connector filter

A rule that you use to prevent connector space objects from linking to metaverse objects.

See also: connector object; connector space object; disconnector object; filtered disconnector object; metaverse object

connector object

An object in the connector space that represents an object in a connected data source and is currently linked to an object in the metaverse. The metadirectory uses connector objects to synchronize attribute values between a connected data source and the metaverse.

See also: attribute; connected data source; connector space; connector space object; disconnector object; explicit connector object; metaverse; object; synchronization

connector space

A staging area that contains representations of selected objects and attributes in a connected data source.

See also: attribute; connected data source; connector space object; management agent; metaverse; object

connector space object

An object in the connecter space that is either created by a data import from the connected data source or by provisioning. These objects hold attribute values that can be imported or exported from corresponding objects in the connected data source or the metaverse.

See also: attribute; connected data source; connector object; connector space; disconnector object; metaverse; object; provisioning

constant mapping

A type of attribute mapping that specifies a single destination attribute and a constant string value for that attribute.

See also: attribute mapping; direct mapping; string

convergence

The ability to define a set of business rules that govern the flow of identity information, which can be enforced over time by the metadirectory.

See also: identity information; metadirectory

custom data input file

A file that contains the actual data that you want to import into the metadirectory by using a file-based management agent.

See also: file-based management agent; metadirectory; template input file

D

data lineage

The history of an object in the metadirectory.

E

encryption key

A bit string that is used in conjunction with an encryption algorithm to encrypt and decrypt data.

explicit connector object

An object in the connector space that is linked to an object in the metaverse and cannot be disconnected by a connector filter. An explicit connector object can only be created manually with Joiner, and it can be disconnected by provisioning.

See also: connector filter; connector object; connector space; connector space object; Joiner; metaverse; object; provisioning

explicit disconnector object

An object in the connector space that is not linked to an object in the metaverse and can only be joined by using Joiner. To change an explicit disconnector object to a disconnector object, you must use Joiner.

See also: connector space; connector space object; disconnector object; Joiner; metaverse; metaverse object; object

export attribute flow

The process of exporting an attribute from the metaverse to the connector space. This process might involve applying rules extensions or modifying attributes. Exported attributes are staged in the connector space for the next delta export.

See also: attribute; attribute flow; connected data source; connector space; delta export; metaverse; rules extension

Extensible Markup Language (XML)

A meta-markup language that provides a format for describing structured data. This facilitates more precise declarations of content and more meaningful search results across multiple platforms. In addition, XML enables a new generation of Web-based data viewing and manipulation applications.

F

file-based management agent

Any management agent that uses a text file to import data from and export data to a connected data source.

See also: connected data source; management agent

filtered disconnector object

A connector space object that is prevented from being projected or linked to an object in the metaverse based on connector filter rules in the associated management agent.

See also: connector filter; connector space object; disconnector object; management agent; metaverse; metaverse object; object; projection

forest

One or more Active Directory domains that share the same class and attribute definitions (schema), site and replication information (configuration), and forest-wide search capabilities (global catalog). Domains in the same forest are linked with two-way, transitive trust relationships.

full import

An import of all data from a file, or a scoped view, of a connected data source to the connector space. Data from the connected data source is compared with data in the connector space. If there are no attribute changes, the object is not changed in the connector space.

See also: attribute; connected data source; connector space; object; scope

G

GAL

See definition for: global address list (GAL)

global address list (GAL)

A directory of all mail-enabled objects to which messages can be addressed.

global catalog

A directory database that applications and clients can query to locate any object in a forest. The global catalog is hosted on one or more domain controllers in the forest. It contains a partial replica of every domain directory partition in the forest. These partial replicas include replicas of every object in the forest, as follows: the attributes most frequently used in search operations and the attributes required to locate a full replica of the object.

H

There are no glossary terms that begin with this letter.

I

identity information

Electronically stored data about a person or resource, such as a device. For example, a person's name, employee ID, or a printer's physical location.

import attribute flow

The process of importing an attribute from the connector space to the metaverse. This process might involve applying rules extensions, applying filters, or modifying attributes.

See also: attribute; attribute flow; connected data source; connector space; metaverse; rules extension

index

In a relational database, a database object that provides fast access to data in the rows of a table, based on key values. Indexes can also enforce uniqueness on the rows in a table.

J

join

The process of linking a connector space object with an existing metaverse object. Attribute values flow only between linked objects.

See also: attribute flow; connector space object; join criteria; join rules; Joiner; metaverse object

join criteria

For a given connector space object, the specific characteristics that must be met by the metaverse object to which the connector space object is to be joined.

See also: connector space object; join; join rules; metaverse object

join rules

Rules that determine whether there is an existing metaverse object that meets the join criteria for a connector space object. If the join criteria is met, the connector space object is linked to that metaverse object.

See also: connector space object; join; join criteria; metaverse object

Joiner

A FIM tool that you use to perform any of the following tasks: change the disconnection type of an object, join a connector space object to an existing metaverse object, or project a connector space object into the metaverse thereby creating a new metaverse object.

See also: connector space; connector space object; join; metaverse; metaverse object; projection

K

There are no glossary terms that begin with this letter.

L

log file

A file that stores messages generated by an application, service, or operating system. These messages are used to track the operations performed. For example, Web servers maintain log files listing every request made to the server. Log files are usually plain text (ASCII) files and often have a .log extension.

M

See definition for: management agent

management agent

A component that consists of properties, rules, and rules extensions that determine how an object is processed in the metadirectory. A single management agent can have one or more run profiles that determine the management agent's behavior, such as how or when the management agent runs.

See also: connected data source; metaverse; rules extension; run history; run profile; synchronization

Management Agent Designer

The user interface that you use to configure data synchronization between a connected data source and the metaverse.

See also: connected data source; management agent; metaverse

manual precedence

A configuration option for metaverse attributes where attribute flow precedence is ignored and updates to the destination attribute values are determined by a rules extension.

See also: attribute flow; attribute flow precedence; connected data source; metaverse; rules extension

mapping

A rule that establishes a data flow relationship from a source (which can be a connector space attribute, metaverse attribute, constant value, distinguished name component, or nothing) to a target connector space or metaverse attribute.

See also: attribute; attribute flow; attribute flow rules; connector space; metaverse; rules extension

metadirectory

A data store and a collection of services that synchronizes and provisions identity information across multiple connected data sources.

See also: connected data source; data store; identity information; provisioning; synchronization

metaverse

The data store used by FIM to contain the aggregated identity information from multiple connected data sources, providing a single global, integrated view of all combined objects.

See also: connected data source; connector space; data store; identity information; metadirectory; metaverse object; object

Metaverse Designer

A FIM tool that you use to create and manage object and attribute schema, object deletion rules, and attribute flow precedence in the metaverse.

See also: attribute; attribute flow precedence; metaverse; object; object deletion rule; schema

metaverse object

An object that has been projected into the metaverse from a connector space object and is linked to at least one object in the connector space. A metaverse object represents the aggregated view of objects from one or several connected data sources.

See also: connected data source; connector space; connector space object; metaverse; object; projection

metaverse object type

A formal definition, contained in the schema, for a specific kind of object that can be stored in the connector space or the metaverse. An object type is a distinct, named set of attributes that represents something concrete, such as a user, a printer, or an application. The attributes contain data that describe the object's characteristics. For example, attributes of a user might include the user's first name, last name, and e-mail address.

See also: attribute; connector space; metaverse; object; schema

Microsoft Forefront Identity Manager encryption key

A code that is used by the industry-standard, cryptography-based protection service that protects FIM configuration data.

N

naming context

A specific subtree of a directory information tree that is identified by its distinguished name (also known as DN). For example, a naming context that stores all entries for Litware, Inc. marketing employees at the Boston office might be called ou=mktg, ou=Boston, o=Litware, c=US.

O

object

An entity of a certain type in the connector space or metaverse that is uniquely identified by a distinguished name, anchor, and internal identifier.

See also: anchor; connector object; connector space; connector space object; disconnector object; distinguished name; metaverse; metaverse object

object class

A distinct, named set of attributes that represents a specific type of entity stored in the directory, such as users, printers, or applications. The attributes include data describing the thing that is identified by the directory object. Attributes of a user might include the user's first name, last name, and e-mail address.

P

partition

A logical volume of data in the connector space. A management agent can create one or more partitions to logically divide data into separate logical groupings. Each volume of data is processed individually during synchronization.

See also: connector space; management agent; synchronization

placeholder object

An object in the connector space that represents a single level of the hierarchy of the connected data source. Or, an object in the connector space that represents an object in the connected data source to which an imported attribute value refers (for example, the object to which the manager attribute refers in a user object). Placeholder objects do not contain attribute values and cannot be linked to the metaverse.

See also: connected data source; connector space object; metaverse; object

Preview

A tool that administrators use to perform a test run of changes to a single object. With Preview, administrators can see the effect of a configuration change before actually applying the change.

Q

There are no glossary terms that begin with this letter.

R

relative distinguished name

The part of the object name that identifies the object as unique from its siblings at its level in the naming hierarchy. For example, in the distinguished name CN=My Name,CN=Users,DC=Microsoft,DC=Com the relative distinguished name of the user object is My Name. The relative distinguished name of the user object's parent object is Users.

S

schema

The set of definitions for objects that can be stored in the connector space and metaverse. There is a schema for the metaverse and a schema for each management agent. For each object type, the schema defines which attributes an instance of the object type must have, which additional attributes it can have, and which other object types can be its parent object class.

See also: connector space; management agent; metaverse; metaverse object type; object; object class

scope

A range of values or conditions used to search for objects in the connector space or metaverse. A scope can include such conditions as date, pending import, disconnector objects, object type, and so on.

See also: connector space; disconnector object; metaverse; metaverse object type; object

security

On a network, protection of a computer system and its data from harm or loss, implemented especially so that only authorized users can gain access to shared files.

security group

A group that can be listed in discretionary access control lists (DACLs) used to define permissions on resources and objects. A security group can also be used as an e-mail entity. Sending an e-mail message to the group sends the message to all the members of the group.

T

template input file

A representative sample of a custom data input file that is used to create a file-based management agent. When you use a template input file, the file is parsed to determine the format type, object classes, and attributes.

See also: attribute; custom data input file; file-based management agent; management agent; object class

trust relationship

A logical relationship established between domains to allow pass-through authentication, in which a trusting domain honors the logon authentications of a trusted domain. User accounts and global groups defined in a trusted domain can be given rights and permissions in a trusting domain, even though the user accounts or groups don't exist in the trusting domain's directory.

U

There are no glossary terms that begin with this letter.

V

There are no glossary terms that begin with this letter.

W

Windows Management Instrumentation (WMI)

A management infrastructure in Windows that supports monitoring and controlling system resources through a common set of interfaces and provides a logically organized, consistent model of Windows operation, configuration, and status.

X

XML

See definition for: Extensible Markup Language (XML)

Y

There are no glossary terms that begin with this letter.

Z

ZScript

The proprietary scripting language that was used in Microsoft Metadirectory Services version 2.2. ZScript has been replaced by the languages that are integrated with Visual Studio .NET 2008. You can use Visual C# .NET, Visual Basic .NET, or other languages (for example, Perl) that can be integrated with Visual Studio .NET 2008.

ZStore

The proprietary data store that was used in Microsoft Metadirectory Services version 2.2. ZStore has been replaced by Microsoft SQL Server 2008.

Forefront Identity Manager Glossary

A

B

C

D

E

F

G

H

I

J

K

L

M

N

O

P

Q

R

S

T

U

V

W

X

Y

Z