Microsoft Forefront Identity Manager 2010

[Monty1]

The family of systems Forefront includes a set of security tools. These include functions such as firewalls, malware scanner for viruses and spyware, a VPN gateway and other similar safety devices. The Forefront Identity Manager 2010 (FIM) has an entirely different focus: it takes care of user identities. This includes the management of user credentials, including certificates, smart cards and tokens. These building blocks are essential for secure IT operations, because security must always be consistent, based on the user. So it is only logical that the FIM Security Suite Forefront assigned. Entirely new is not FIM. Rather, it builds, like most Forefront modules to existing products, and expands it. The roots of the FIM are in the Microsoft Identity Integration Server 2003 (MIIS). This was then in 2007 for Information Lifecycle Manager 2007 (ILM 2007). New to the ILM 2007 was to include a component certificate management. From the ILM 2007 now shows the Forefront Identity Manager 2010. This was enhanced with workflow, self-service capabilities and integration components, such as in Outlook. Had one or all three security products in common: It was from these components is essentially all about user identities. Microsoft has software for managing user identities train to train his expanded. FIM in 2010 now the complete life cycle of a user and his identity is covered. This goes far beyond the simple synchronization of user permissions beyond.

[KennedII]

The functions of FIM can be divided into two relatively separate areas. On the one hand are the block for the management of user identities and the other is the credential management. Here FIM includes a complete package with all the functions, management tools and interfaces to create or modify access permissions. Also included is the management of user groups, and the synchronization of the passwords are about directory boundaries. Microsoft has given in FIM a workflow engine implements. The aim of the user management is to provide the employees with the rights they need to perform their work. A new employee begins, always in the HR department. Functionality changes for existing employees will find themselves in a rule, first in the data of the personnel department. So it is only fitting to articulate the IT user management with it.

[Christina 80]

A new employee begins, always in the HR department. Functionality changes for existing employees will find themselves in a rule, first in the data of the personnel department. So it is only fitting to articulate the IT user management with it.

This happened by FIM connectors in the management agent. In FIM connectors are those integrated into the current directory and available support systems, such as Novell eDirectory, the lists of Sun or Oracle, LDAP directories, the SAP directory and of course, the Active Directory. For example, user data is the human resources department directly imported from SAP in FIM. Likewise, users can take data from a text file or an Excel worksheet in FIM. And of course, the data can be entered directly in FIM. Microsoft does FIM a large number of connectors directly available. For specific directory deployments, the partners provide additional links with other conjunctions. The connectors FIM interacts with other systems and exchanges to this its information. It takes over the role of the FIM either leading identity system or integrated into an existing directory infrastructure. For specific directory implementations provide additional links with partners or other connectors can be created by the administrator of customized applications and systems themselves.

[Umberto-Micro]

The most frequent calls to the help desk to be the questions because of incorrect or forgotten passwords. These service tickets are completed quickly and easily, yet powerful in the sum. Through the self-service password reset in FIM password management is that part of the users to transfer to. In this case, that procedure is to use that know a lot of users of Internet websites. The user needs into a number of questions answered correctly, only then shall he be sent a new password. These questions and answers are laid down once. This procedure is so simple and effective. A question about the mother's maiden name, for example, can hardly be answered by an unauthorized third party. Type and number of questions by the company to set free. This also applies to the set of possible questions to be answered correctly. Also, the questions can be freely defined.

[Efigenio]

As an account-user and corpses are called the permissions that really should no longer be active, for example because the staff concerned have left the company. Account corpses represents what is now a serious security risk because no one thinks of the administrator users that no longer exist, could or can. The danger of this is displayed in their abuse . To find them, only the comparison with the active help users through lists or automated processes. This is another area of FIM. Through the functions of reporting comprehensive information about the users, their activity, groups and access lists are offered. In a similar score to beat the dynamic groups - another new feature of FIM 2010th Dynamic groups - their name suggests - created as needed and are therefore more flexible than their static counterparts.

[Galbraith]

With the Forefront Identity Manager 2010 (FIM) Microsoft writes the history of Microsoft Identity Integration Server (MIIS) 2003 and Information Lifecycle Manager 2007 continues. The Identity Manager has been enhanced over its predecessors for many functions. This includes in particular the improved workflow engine with workflow orchestration, the self-service password reset and dynamic lists - all technical improvements. Moreover there are also in the future the company to manage the workflow of users and their identities are available. But know this must and can only implement the relevant company and in FIM processes. In order that the responsibility for greater security through better user management at the companies.