Export a Microsoft Identity Manager connector for use with the Azure AD ECMA Connector Host

Important

The on-premises provisioning preview is currently in an invitation-only preview. To request access to the capability, use the access request form. We'll open the preview to more customers and connectors over the next few months as we prepare for general availability.

You can import into the Azure Active Directory (Azure AD) ECMA Connector Host a configuration for a specific connector from a Forefront Identity Manager Synchronization Service or Microsoft Identity Manager Synchronization Service (MIM Sync) installation. The MIM Sync installation is only used for configuration, not for the ongoing synchronization from Azure AD.

Important

Currently, only the generic SQL connector is supported for use with the Azure AD ECMA Connector Host.

Create and export a connector configuration in MIM Sync

If you already have MIM Sync with your ECMA connector configured, skip to step 10.

  1. Prepare a Windows Server 2016 server, which is distinct from the server that will be used for running the Azure AD ECMA Connector Host. This host server should either have a SQL Server 2016 database colocated or have network connectivity to a SQL Server 2016 database. One way to set up this server is by deploying an Azure virtual machine with the image SQL Server 2016 SP1 Standard on Windows Server 2016. This server doesn't need internet connectivity other than remote desktop access for setup purposes.
  2. Create an account for use during the MIM Sync installation. It can be a local account on that Windows Server instance. To create a local account, open Control Panel > User Accounts, and add the user account mimsync.
  3. Add the account created in the previous step to the local Administrators group.
  4. Give the account created earlier the ability to run a service. Start Local Security Policy and select Local Policies > User Rights Assignment > Log on as a service. Add the account mentioned earlier.
  5. Install MIM Sync on this host. If you don't have MIM Sync binaries, you can install an evaluation by downloading the zip file from the Microsoft Download Center, mounting the ISO image, and copying the folder Synchronization Service to the Windows Server host. Then run the setup program contained in that folder. Evaluation software is time limited and will expire. It isn't intended for production use.
  6. After the installation of MIM Sync is complete, sign out and sign back in.
  7. Install your connector on the same server as MIM Sync. For illustration purposes, this test lab guide will illustrate using one of the Microsoft-supplied connectors for download from the Microsoft Download Center.
  8. Start the Synchronization Service UI. Select Management Agents. Select Create, and specify the connector management agent. Be sure to select a connector management agent that's ECMA based.
  9. Give the connector a name, and configure the parameters needed to import and export data to the connector. Be sure to configure that the connector can import and export single-valued string attributes of a user or person object type.
  10. On the MIM Sync server computer, start the Synchronization Service UI, if it isn't already running. Select Management Agents.
  11. Select the connector, and select Export Management Agent. Save the XML file, and the DLL and related software for your connector, to the Windows server that will be holding the ECMA Connector Host.

At this point, the MIM Sync server is no longer needed.

  1. Sign in to the Windows server as the account that the Azure AD ECMA Connector Host will run as.
  2. Change to the directory C:\Program Files\Microsoft ECMA2host\Service\ECMA. Ensure there are one or more DLLs already present in that directory. Those DLLs correspond to Microsoft-delivered connectors.
  3. Copy the MA DLL for your connector, and any of its prerequisite DLLs, to that same ECMA subdirectory of the Service directory.
  4. Change to the directory C:\Program Files\Microsoft ECMA2Host\Wizard. Run the program Microsoft.ECMA2Host.ConfigWizard.exe to set up the ECMA Connector Host configuration.
  5. A new window appears with a list of connectors. By default, no connectors will be present. Select New connector.
  6. Specify the management agent XML file that was exported from MIM Sync earlier. Continue with the configuration and schema-mapping instructions from the section "Configure a connector."

Next steps