virtual techdays INDIA │ august 2010 Managing Active Directory Using Microsoft Forefront Identity Manager: Amol R Bhandarkar │ Tech Specialist – Identity & Access, Microsoft Corp.

 Overview of FIM  How FIM can help manage AD  Demo  Various scenarios of using FIM to manage AD virtual techdays INDIA │ august 2010 S E S S I O N A G E N D A

virtual techdays INDIA │ august 2010 Overview of Forefront Identity Manager 2010 (FIM 2010)

Identity Lifecycle Manager -> Forefront Identity Manager Identity Synchronization User Provisioning Certificate and Smartcard Management Office Integration for Self-Service Support for 3rd Party CAs Codeless Provisioning Group & DL Management Workflow and Policy UserManagement GroupManagement CredentialManagement Common Platform WorkflowConnectorsLogging Web Service API Synchronization PolicyManagement

Credential Management Heterogeneous certificate management with 3rd party CAs Management of multiple credential types, including One Time Passwords Self-service password reset integrated with Windows logon Group Management Rich Office-based self-service group management tools Offline approvals through Office Automated group and distribution list updates User Management Integrated provisioning of identities, credentials, and resources Automated, codeless user provisioning and de-provisioning Self-service profile management Policy Management SharePoint-based console for policy authoring, enforcement & auditing Extensible WS– * APIs and Windows Workflow Foundation workflows Heterogeneous identity synchronization and consistency Forefront Identity Manager - Feature areas 5

End User Scenarios Credential Management Group Management User Management Policy Management 6 Integration with Windows logon No need to call help desk Faster time to resolution Request process through Office No waiting for help desk Faster time to resolution Automatic updating of business applications No need to call help desk Faster time to resolution Automatic routing of multiple approvals Approval process through Office Audit trail of approvals

IT Administrator Scenarios Credential Management Group Management User Management 7 Policy Management Centralized management Automatic policy enforcement across systems Management of role changes & retirements Generation and delivery of initial one-time use password Integration of smart card & cert enrollment with provisioning Automatic management of group membership Secure access to departmental resources, with audit trail

Forefront Identity Manager in Action Directories Custom Self-Service integration LOB Applications FIM Portal ISV Partner Solutions Windows Log On IT Departments Databases Policy Management Credential Management User Management Group Management

How does FIM help in managing AD User Lifecycle Management – Creation of users / deletion of users Creating users in specific OU’s – Based on attributes like locations or departments Create OU, if none exist before, automatically Maintaining group memberships – Based on criteria like attribute values Managing Groups and DLs – Allow users to create / manage groups and memberships Self-Service Password reset – Reset your own password based on challenge / response mechanism – Users can unlock their account if locked 9

How does FIM help in managing AD Privilege management tool – Users can request for high level of access – Access can be granted based on approvals – Time based criteria Enable Smartcard provisioning – Smartcards can be used as two-factor/Strong authentication Allow user to maintain and manage their own profile – Users can update their information like mobile #, Phone details, etc. 10

virtual techdays INDIA │ august 2010 DEMO: Managing AD using FIM 2010 Amol R Bhandarkar │

Demo scenarios User provisioning / de-provisioning Group membership change Automatic change in OU membership Self-service Password reset Workflow based approval process Creation of DL and managing group memberships 12

virtual techdays INDIA │ august 2010 RESOURCES  More information about Forefront Identity Manager   

virtual techdays THANKS │ august 2010 │