Articles in this section

See more

A901 - HyperSync Patterns and Practices Primer for Experts

Avatar
Bob Bradley (SIDM)
  • Created
  • Updated
Follow

1-Day Course

This course has been extended to include HyperSync

Course History and Future Events

Description

This is a hands-on expert version of M900. There will be a concentration on labs and open Q&A. This course assumes you are already familiar with HyperSync and/or have attended M900.

HyperSync replaces or enhances the Microsoft Identity Manager (MIM) sync engine solution. When coupled with SoftwareIDM Service Panel, HyperSync replaces and improves what is offered with MIM Sync and the MIM Portal. Managed, programmed, tested, and operated from within the Identity Panel web interface, HyperSync is true SaaS application running natively on Azure App Services, with the option of running on premises. What is compelling when considering HyperSync, is its on-premises Panel Service component that empowers Azure to manage on-premises sources and targets. For those not ready for the cloud-based sync engine, HyperSync also can be installed and operated as on-premises software, much as MIM is operated today. 

This course is for the identity solution developer who is planning or participating in a HyperSync implementation as a replacement for Microsoft Identity Manager (MIM), or to fix or enhance an existing MIM. MIM versions of this course focus on migrating MIM to Identity Panel's HyperSync and Service Panel. HyperSync versions cover the entire HyperSync application, including coding. Although the focus of this course is solution development, much of the material is useful for those who would like to understand HyperSync in-depth. This course looks at how to design and implement greenfield identity synchronization deployments, as well as phased replacement of an existing solution (with an emphasis on Microsoft Identity Manager).

Who Should Attend

  • Those want to attend A902 to learn the latest Patterns and Practices for migrating from MIM or implementing a new HyperSync solution. 
  • Consulting firms, independent consultants, and internal IT staff responsible for a successful implementation or expansion of a HyperSync deployment.

What you will learn

  • The architecture, components and concepts of the Identity Panel core framework.
  • The role performed by each of the Identity Panel Suite of Applications.
  • How sync solutions for Identity Panel are implemented with either MIM or HyperSync Panel.
  • Understand how HyperSync replaces or enhances MIM sync in an Identity Panel configuration.
  • Understand how a Service Panel configuration replaces or enhances the MIM Portal solution.
  • Run test cases, positive testing, negative testing, step changes, and roll-back changes.
  •  

Prerequisites

  1. Must have attended A850 - Rule Engine Language & Report Writing.
  2. Own a subscription to the Knowledge Package for Developers or the Knowledge Package for Administrators or considering consulting on the Identity Panel Suite.
  3. Have experience writing SQL queries or using any language including PowerShell or MIM Portal Rules.
  4. Be a level 2 engineer or developer in one of the data sources you plan to use with Identity Panel, which must include one of the following:
    • HyperSync or FIM/MIM
    • Azure AADConnect
    • Active Directory, LDAP
    • Azure AD/Graph
    • SQL Server, Oracle, or MySQL
    • ADFS
    • Office 365
    • Exchange Server
    • Workday
    • ServiceNow

The diagram below shows how this course fits with suggested learning tracks.

mceclip0.png

Course Outline

  • Synchronization Engines
    • Need for Synchronization Engines
    • Microsoft Identity Manager
    • Microsoft Azure AD Connect
    • HyperSync Panel
  • Introducing HyperSync Panel
    • State and Event based flow
    • Attribute flow
    • Scheduling and performance
    • Thresholds and safety tools
    • Password Synchronization
  • Working with MIM Sync
    • Feature comparison
    • MIM Sync replacement
    • Parallel operation
  • Designing a Hyperverse
    • When a Hyperverse might not be necessary
    • Object types and joining
    • Handling of reference attributes
  • Provisioning
    • Provision throttling
    • Unique value generation
    • Considerations for account creation fixtures
    • Managing initial passwords
  • Deprovisioning and Deactivation
    • Servicing time-based scenarios
    • Servicing long-term leave and account dormancy
    • Syncing with deleted accounts
  • Parallel operations with Azure AD Connect
    • Cloud-direct and synced accounts
  • Implementation considerations
    • Requirements gathering
    • Test cases for HyperSync configuration
      • Simulating HR changes
    • Debugging HyperSync configuration
  • Further Synchronization Features
    • Unique Values
    • Indices
    • MakeUnique() Function
    • Password Management
      • Initial Password Creation features and strategies
      • Password Synchronization
    • Precedence
  • Further Deletion and Deprovisioning
    • Attribute and Objects
    • Delayed Deprovisioning
  • Managed Groups

Course Detail

The course will cover the above items, in addition to Service Panel functionality.  This will proceed loosely according to the agenda below, with flexibility to adapt according to the experience and areas of interest of the attendees.

Morning

  • The architecture and components of the Identity Panel core framework.
  • Key concepts such as the Rules Engine, Unique Name Indexes, Fixtures and Schedules.
  • The role performed by the Application and Panel services.
  • The role of each of the applications in the Identity Panel Suite:
    • Test Panel
    • Service Panel
    • Access Panel
    • HyperSync Panel
  • Understand how the Identity Panel Suite of applications without HyperSync enhances and extends the functionality and effectiveness of any MIM solution.
  • Understand how the addition of HyperSync to an Identity Panel configuration replaces or enhances the Microsoft Identity Manager (MIM) sync engine solution:
    • Overlap with MIM Sync.
    • Overview of the key differences, in particular performance gains, precedence and the join graph.
    • Providers and Silos.
  • Deep dives into the Identity Panel application, including:
    • Time Traveler
    • Scheduler
    • Dashboards
  • Introductory lab session
  • HyperSync Concepts
    • Thresholds and Throttles
    • Rule Sets
    • Scope Filters
    • Hyperverse

Afternoon

  • Understand how a Service Panel configuration replaces or enhances the MIM Portal solution.
    • Similarities to the MIM Portal
    • Key differences to the MIM Portal
    • The Virtual Identity
    • Service Forms, Pages, Sections, Input rows and Inputs.
    • Dashboards
    • Action sequences
    • History
  • Scenarios
    • Emergency Terminations
    • Account Dormancy
  • Labs
  •  

Related articles

Comments

0 comments

Article is closed for comments.