- Microsoft Identity Manager 2016 SP1
- Generic SQL Connector / SQL Management Agent
PROBLEM SCENARIO DESCRIPTION
Full Import (Stage Only) intermittently on a SQL MA showing a large number of deletes, which is unexpected. This causes deprovisioning to occur in the Identity Management Solution. Depending on how deprovisioning rules are setup, this can cause disconnected objects and/or deletions to occur on target management agents.
The Generic SQL Connector was referencing a SQL Server View which was being rebuilt via a SQL Server Maintenance Task occurring at the same time the Full Import (Stage Only) was running.
|NOTE||It is important to note, that if you have a Database Management Agent that points to a View (or Temporary Table) that is rebuilt, you might run into this issue as well.|
Ensure that the Full Import (Stage Only) occurs after the SQL Server Maintenance Task is completed to ensure that the accurate number of objects is represented in the connector space of the Generic SQL Connector / SQL Management Agent. In this case the schedule for SQL Maintenance Task which was rebuilding the SQL View was changed so that the task ran after the Full Import (Stage Only) was finished each day.
- Generic SQL Connector Technical Reference: https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnectsync-connector-genericsql
- MIM Connectors Download: https://www.microsoft.com/en-us/download/details.aspx?id=51495