1. Timeline

2. Past IdM State Diagram

3. Current IdM State Diagram

4. Future IdM State Diagram

5. Benefits
Decreased processing time for user accounts from a 24 hour to a 2 hour cycle
Improved security by automatically disabling accounts
Provided users with account / resource access guidelines
Increased ease of populating internal and external systems
Moved into a position where federated “cloud” services were possible

6. Gotchas Need to implement overrides
Issues with Outlook Live shared domain space
Users with multiple roles need to have their mailbox in the correct system. This involves complicated forwarding rules and work on the user’s part.
Manual intervention for student to employee / employee to student moves

7. To Dos Upgrade from ILM 2007 to FIM 2010
Implement Outlook Live Management Agent
Override improvements (documentation and automatic removal)
Non-employee improvements (documentation and automatic de-provisioning)

8. Federated Access
The following applications now use Shibboleth for authentication. This allows for the use of Loyola credentials for login.
Educause
Lynda.com
e2Campus
DreamSpark