1. Presentation_title Forefront Identity Manager 2010
FIM 2010
Forefront Identity Manager 2010
Carol Wapshere, MVP
LANexpert
dd/mm/yyyy, author_alias

2. GALSync IIFP MMS MIIS 2003 ILM 2007 DirSync CLM
Too many names already!
GALSync
IIFP
MMS
MIIS 2003
ILM 2007
DirSync
CLM

3. User Management previous versions
******
Resigned
Campion
Campion
Campion
Project Manager
Project Manager
Project Manager
Jane
Jane
Jane
Department =
Sales
Accounts
Sales
Sales
Sales
Ph =
Ph =
Ext = 123
Access Changes
Password Sync
Attribute Flows
Deprovisioning
Provisioning

4. User Provisioning FIM-style
User Requests an account for an external person
Consultant’s account expires in two weeks
Account expired
Requestor
Request
Name = “Joe Bloggs”
Description = “Consultant working on project”
EndDate = 1/8/2010
...
Consultant
Manager
Notification sent to Requestor: Consultant’s account will be deleted in two weeks unless extended in the Portal
sent to requestor with username and password
Approval request sent to the user’s Manager
User enters request in FIM Portal
Manager approves
User account provisioned
User account deleted.

5. FIM 2010 Component Architecture
Password reset from the login screen.
Portal for Users and Administrators.
FIM 2010 Component Architecture
Outlook plugin:
Approvals and group management.
Custom extensions through WS-*, includes powershell.

6. Demo A quick look at the Portal User self-service
User provisioning with approval

7. The FIM Portal Add new menu options, visibility based on user type
Default Administrator Portal
Default User Portal

8. Customisable Schema

9. Configurable Interface

10. User Profile Management

11. Password Reset Personal questions.
Registration. User prompted at each logon until registered.
User must re-enter their password to register.

12. Requesting a User Accout
User creates a New User through their Portal
Approval request sent to requestor’s Manager
Filling in the details
Pending Approval

13. Codeless Sync Rules

14. Web Services - Powershell

15. Key FIM 2010 Features Identity Management Portal User Self-Service
Flexible schema, menus, forms, access controls...
User Self-Service
Profile update, password reset, join groups.
Workflow
Notifications, approvals, generate attributes – and roll your own!
And my favorites…
Automatically populated groups,
Using Powershell to query and upload data to the Portal!

16. FIM 2010 Requirements Windows Server 2008/r2 Standard SQL Server 2008
Sharepoint Services 3.0
FIM 2010
Server License: Sync Service
User CALs: Portal, PW Reset, Codeless Sync, CLM

17. FIM 2010 Architecture
All on one server, or functions split across several servers

18. FIM 2010 Resources
FIM 2010 homepage:
Download a 180-day trial version
Documentation
Technet Forums/Identity Management Forums
Very active community
Scriptbox, Experts Corner, Greatest Hits Articles
MVP Blogs
Like mine...
Training
Available from LANexpert

19. Thank you for your Attention!
For more Information please contact
Carol Wapshere
Senior Consultant
Laurent Calais
Security Business Development

20. Presentation_title
dd/mm/yyyy, author_alias