SharePoint MIM Profile Sync – Completed No Objects

Posted On November 16, 2020

Consider the following scenario:

  • You’re using SharePoint 2016 or 2019 and using Active Directory Import to import user profiles.
  • You decide to switch to using an external identity manager utilizing Microsoft Identity Manager (MIM).
  • You configure MIM and run a Full Import on the SharePoint Management Agent (SPMA).
  • The Full Import does not import anything and shows status “Completed-No-Objects“.

Cause:

Switching your profile synchronization option from “Active Directory Import” to “External Identity Manager” (or vice versa) clears out a few “status” tables in the Profile database that the SharePoint import / export web service uses to determine the synch status of the imported profiles. That is normal and expected.

However, in that case, when only a Full Import step is run, the web service cannot tell that any profiles have been imported, so the step will complete with status “Completed-No-Objects“

Usually, this goes unnoticed because in most cases, Administrators will kick off a “Full Synchronization”, which would include a Full Import from Active Directory (AD), Full Sync for the AD Management Agent, Full Sync for the SharePoint MA, and then Export to SharePoint. 

During that Export to SharePoint, those “status” tables are populated, and then subsequent runs of the Full Import step for the SharePoint MA are able to pull the existing user profiles into MIM.

In Summary:
You must run though all the Sync steps (run profiles) the first time around, and then Full Import should work after that.

 

Resolution:

In most cases, simply running through all of the synchronization steps / run profiles for both the AD and SP management agents will fix this up.

If that doesn’t work, you may need to clear out the SharePoint connector space and then run a few sync steps in a certain order to properly populate the connector space and hook up the existing AD objects to the existing SharePoint profiles, as detailed below:

  • Clear out the SharePoint Connector Space:
    • Open the MIM client (MIISClient.exe).
    • Click the Management Agents tab.
    • Select the SharePoint management agent.
    • From the Actions menu, click Delete.
    • When prompted, choose the option “Delete connector space only“, and click the OK button.
  • Re-populate the SharePoint MA connector space and link AD users to SP profiles:
    • On the Management Agents tab, select the Active Directory Management Agent (ADMA)
    • From the Actions menu, click the Run option.
    • From the Run Management Agent dialog, choose “FullSync“, then click the OK button.
      • This will provision all objects into the SPMA’s connector space.
    • When the Full Sync run is complete, select the SPMA.
    • From the Actions menu, click the Run option.
    • From the Run Management Agent dialog, choose “Export”, then click the OK button
      • This will populate those “status” tables in the Profile database.
    • When the Export is complete, select the SPMA again.
    • From the Actions menu, click the Run option
    • From the Run Management Agent dialog, choose “DeltaImport“, then click the OK button.
    • When the Delta Import run is complete, select the SPMA again.
    • From the Actions menu, click the Run option.
    • From the Run Management Agent dialog, choose “DeltaSync”, then click the OK button.

 

Add a Comment