SharePoint 2013 External FIM Issue-Missing manager property:

The User Profile Synchronization service is the core of the synchronization architecture in SharePoint Server 2013. When you start the User Profile Synchronization service on the synchronization server, SharePoint Server 2013 provisions a version of Microsoft Forefront Identity Manager (FIM) to participate in synchronization. A User Profile service application can only have one User Profile Synchronization service. A User Profile Synchronization service is associated with connections and mappings.

upsa 1

So that being said we are going to talk about an issue with the missing manager field in the SharePoint user profiles. This is something new which we observed in our environment and we happened to work with our PFE to fix this. I’m really not sure whether most SharePoint admin’s are aware of this issue, if not then you really need to take a look at this article below.

By any chance if you’re using an External FIM deployment to push your user profile information to SharePoint 2013, then you would have likely come across this issue. In our environment all was well with pushing the user profiles from FIM to SharePoint except the “manager” field wasn’t getting populated, even though FIM was synching it correctly. After working with our PFE and the FIM engineer, we solved this one.

So in a nutshell the issue which we are trying to fix here is the missing manager field which doesn’t get populated in the SharePoint user profiles when you’re using FIM to push the profiles.

You can take a look at how this is set up in your environment by going to Central Admin–>User Profile service application –>Configure Synchronization settings.

upsa 2

Fix:

Open your ULS log, and look for an entry that looks like this as shown in the screenshot below.

upsa 3

What this means is that we’re getting a null reference exception, when the FIM management agent/connector for SharePoint finishes up. It calls a finalize method that’s part of the web service.

This finalize method is checking for a running instance of the “User Profile AD Import Timer Job “. The problem is that this timer job only gets created if your UPSA configuration settings is set to use the “Active Directory Import” option. Please check the screenshot below.

upsa 4

If you never use/set that setting, which you probably don’t because you’re trying to use your External FIM deployment, the Timer Job will never exist. To create the timer job, all you need to do is change the setting in your UPSA’s “Configure Synchronization Settings” page to “Active Directory Import” and then to back “External FIM” . This won’t break anything.

Also in addition to that make sure you’re disabling the “User Profile Active Directory Import Job “

upsa 5

You will notice this timer job the moment you change the synchronization settings from “External FIM” to “Active Directory Import”.

You can also use PowerShell for this:

$upsa = Get-SPServiceApplication -name “YOUR_UPSA_NAME”
$upsa.NoILMUsed = $true
$upsa.Update()
$upsa.NoILMUsed = $false
$upsa.Update()

Once this is done, after you run your next FIM full sync, the Finalize method will run, and kick off what it needs to. It may take a few minutes, so please be patient. To confirm the finalize method has run, you can examine your user profiles to ensure the manager field is now present, and also look for entries similar to this in the ULS logs.

upsa 7

Advertisements

One thought on “SharePoint 2013 External FIM Issue-Missing manager property:

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s