You can provision objects for Forefront Identity Manager Certificate Management (FIM CM) by provisioning requests in Forefront Identity Manager (FIM). Because provisioning contains a number of basic steps, see Provisioning Objects in the Connector Space for an overview of provisioning.
When you are deciding how to provision requests, you can choose between two options:
- Use the ClmUtils helper class to assist
with typical provisioning scenarios.
- Write custom provisioning code to help make
deterministic decisions on when to provision requests.
Provisioning Forefront Identity Manager Certificate Management Objects Examples
This section describes the topics that show you how to provision various FIM CM requests:
Framework
Because many of the steps to provision a FIM CM object are the same, the following examples show the framework, in Microsoft Visual Basic and Microsoft Visual C#, around which the example tasks are built.The following example shows you how to use a rules extension to provision a FIM CM request with the assistance of ClmUtils. This approach assumes that the business logic in CLMUtils is in line with the implementation design required by your solution.
See the more detailed and specific examples of how to provision requests without the help of ClmUtils.
| Visual Basic |  Copy Code |
|---|---|
Dim CLMUtils As ClmUtils
Sub Initialize() Implements IMVSynchronization.Initialize
CLMUtils = New ClmUtils(New String() {
"CertificateLifecycleManagerMA"})
End Sub 'IMVSynchronization.Initialize
Sub Provision(ByVal mventry As MVEntry)
Implements IMVSynchronization.Provision
Dim CLMMA As ConnectedMA = mventry.ConnectedMAs(
"CertificateLifecycleManager")
CLMUtils.CreateEnrollRequest(CLMMA,
New Guid(mventry("objectGUID").BinaryValue),
"Smart Card User Template")
If mventry("clmRequestFlag ").IsPresent Then
Select Case mventry("clmRequestFlag").Value.ToLower()
Case "clmdisable"
CLMUtils.CreateDisableRequest(CLMMA,
New Guid(mventry("objectGUID").BinaryValue),
"Smart Card User Template")
Case "clmretire"
CLMUtils.CreateRetireRequest(CLMMA,
New Guid(mventry("objectGUID").BinaryValue),
"Smart Card User Template")
Case "clmrob"
CLMUtils.CreateRecoverOnBehalfRequest(CLMMA,
New Guid(mventry("objectGUID").BinaryValue),
"Smart Card User Template")
Case "clmsuspend"
CLMUtils.CreateSuspendRequest(CLMMA,
New Guid(mventry("objectGUID").BinaryValue),
"Smart Card User Template")
Case "clmreinstate"
CLMUtils.CreateReinstateRequest(CLMMA,
New Guid(mventry("objectGUID").BinaryValue),
"Smart Card User Template")
End Select
End If
End Sub 'IMVSynchronization.Provision
|
|
| C# | Copy Code |
|---|---|
ClmUtils CLMUtils;
void IMVSynchronization.Initialize()
{
CLMUtils = new ClmUtils(new String[] {
"CertificateLifecycleManagerMA" });
}
void IMVSynchronization.Provision(MVEntry mventry)
{
ConnectedMA CLMMA = mventry.ConnectedMAs[
"CertificateLifecycleManager"];
CLMUtils.CreateEnrollRequest(CLMMA,
new Guid(mventry["objectGUID"].BinaryValue),
"Smart Card User Template");
if (mventry["clmRequestFlag "].IsPresent)
{
switch (mventry["clmRequestFlag"].Value.ToLower())
{
case "clmdisable":
CLMUtils.CreateDisableRequest(CLMMA,
new Guid(mventry["objectGUID"].BinaryValue),
"Smart Card User Template");
break;
case "clmretire":
CLMUtils.CreateRetireRequest(CLMMA,
new Guid(mventry["objectGUID"].BinaryValue),
"Smart Card User Template");
break;
case "clmrob":
CLMUtils.CreateRecoverOnBehalfRequest(CLMMA,
new Guid(mventry["objectGUID"].BinaryValue),
"Smart Card User Template");
break;
case "clmsuspend":
CLMUtils.CreateSuspendRequest(CLMMA,
new Guid(mventry["objectGUID"].BinaryValue),
"Smart Card User Template");
break;
case "clmreinstate":
CLMUtils.CreateReinstateRequest(CLMMA,
new Guid(mventry["objectGUID"].BinaryValue),
"Smart Card User Template");
break;
}
}
}
|
|