The document discusses configuring and managing user profile synchronization in SharePoint Server 2010. It provides background on the evolution of Microsoft identity management solutions, from Zoomit Via and Microsoft Metadirectory Services to the current Forefront Identity Manager. It then outlines the key components of the user profile subsystem in SharePoint 2010 and provides recommendations for configuring the user profile synchronization process, including to not use the same account for the sync service and operations, to validate Active Directory permissions, and to have patience during setup.

1. Configuring and managing User Profile SynchronizationIT114Spencer HarbarEnterprise Architect harbar.net

2. About Spencerwww.harbar.net | spence@harbar.net | @harbarsGeneral SharePoint DogsbodyMicrosoft Certified Master | SharePoint 2007Microsoft Certified Master | SharePoint Instructor & AuthorMost Valuable Professional | SharePoint ServerSharePoint Patterns & Practices Advisory Board Member16 years in Enterprise ITISPA Vice PresidentEnterprise Architect working with Microsoft’s largestcustomers deploying SharePoint Server.Works with SharePoint Product Group on 2010 ReadinessAuthor for MSDN & TechNet

3. AgendaProblem Space“Metaverse”Evolution of Microsoft Identity ManagementConfiguring User Profile Sync

4. Problem Space

5. User AttributesAre stored all over the place!Active DirectoryHR SystemLOB SystemLegacy Web appsEven (shudder!) NovellAnd of course, SharePoint User Profiles

6. Key request“Write Back”Change AD attributes based on changes to User Profile Properties

7. “Metaverse”A really good Sci-Fi book Snow CrashMetadirectory

8. Identity management EvolutionMicrosoft

9. Microsoft Identity ManagementZoomit ViaMicrosoft Metadirectory Services (MMS)Identity Integration Server (MIIS)Identity Lifecycle Manager (ILM)Forefront Identity Manager (FIM)

10. Zoomit Via

11. User profile syncSharePoint Server 2010

12. User Profile Subsystem

13. Configuring User profile SyncThat’s enough chat

14. RecommendationsDon’t try and workaround the Farm Account IssueDon’t use the same account to run the service and perform the syncValidate Active Directory Permissions before you startPatience, Patience, Patience!

15. Thank you for attending!

16. Patrick, we miss you