FIM Best Practices – Technical Deep-Dive Carol Wapshere, MVP Identity Management Specialist Unify Solutions SIM423

Server Architecture

FIMSync DB FIMService DB FIM Sync ServiceFIM Service And Portal Password Reset Portal Clustering, stand-by DB Stand-by Server NLB, Service Partitioning NLB SCDW DBs Report Server DBs SCDW Server SCSM Server R2 Reporting

FIM Sync SQL SSIS Data Source

Sync Service Configuration

Metaverse Design

Classic vs Declarative Sync Rules ClassicDeclarative P ROS MIIS/ILM extension code still works, Able to implement complex rules and precedence, Support any target system, Custom logging. Graphic configuration UI, State-based application of rule sets, Scoped Outbound rules: Set/WF/MPR not needed – just applies based on Metaverse attributes, No EREs, Can’t use for deletion. C ONS Custom code to maintain, Restrictions when handling reference attributes Requires Portal CALs, Not extensible, restricted to OOB rules, Won’t work with every target system.

Classic or Declarative?

Automating Deprovisioning

Demo MA Best Practises

Portal – Policy Configuration

Schema

Demo Policy Best Practises

Portal – UI Configuration

Field in error just doesn’t appear

RCDC Demo Reference Attribute Controls

Self-Service Password Reset

SIM423 FIM Best Practices – Technical Deep Dive Exam Forefront Identity Manager 2010, Configuring Contact Me Later By… Blog: