Technical Overview of Microsoft Forefront Identity Manager 2010 R2

2. SIM332

5. User
Management
Group
Management
Credential
Management
Common Platform
Workflow
Connectors
Logging
Web Service API
Synchronization Policy
Management

6. Empowers People
• Greater productivity through faster time to resolution
• Provides Office-based self-service tools
• Delivers SharePoint-based consoles for information workers to manage identities,
access and credentials
Delivers Agility and Efficiency
• Reduces costs through automation and self-service
• Maximizes investments in existing identity infrastructure
• Integrates with familiar developer tools to enable new scenarios
Helps Improve Productivity and Compliance
• Integrates identity, credential, and access management
• Rich access, permissions and delegation model
• Enables system auditing and compliance

7. Forefront Identity Manger - Key Feature Areas
Credential
Management
Group
Management
User
Management
Policy
Management

13. User
Management
Group
Management
Credential
Management
Common Platform
Workflow
Connectors
Logging
Web Service API
Synchronization
Policy
Management
User
Management
Group
Management
Credential
Management
Common Platform
Workflow
Connectors
Logging
Web Service API
Synchronization Policy
Management

15. Illustrative Topology

18. State Events
Historic
Current
• Who is in group A?
• What groups does a particular
person belong to?
• Who is person Y’s manager?
• Who joined group A today?
• What groups had new members today?
• How many new people joined the
company today?
• Who joined group A on May 1st, 2010?
• How did a group’s membership change
over time?
• Who approved a group join?
• How did a set filter definition change over
time?
• What groups did person A have
access to on November 4th, 2009?
• What was a group’s membership
last July?
Source: FIM Portal and Reporting Source: FIM reporting
Source: FIM requests via portal
Source: FIM database via portal

19. Report Class Defined Over Description
Membership
Change Reports
• Group Membership (SG +
DG)
• Set Membership
Contains membership changes, who
approved them, and the associated
request which generated the change.
Object History
Reports
• Users
• Groups
• Sets
• Requests
• Policy Rules
Contains changes to key attributes over
time.

20. Account
Name
Operation
Type
Committed
Time
Group
Name
Request
Originator
Request
Approver
Request
ID
MPR that Triggered
the Request
cwilcox Join Group 1/7/2011
14:27:02
Finance FIM Service {43edf…
}
All accountants have
access to financial
data
kimaber Join Group 1/3/2011
16:12:25
Sales kimaber dparker {81e2b…
}
cwilcox Leave
Group
1/1/2011
08:58:02
Marketing samanthas

21. User Name User ID Operation Attribute Value Requestor Committed Time Request
Colin Wilcox {732d2…} Remove User FIM
Service
2/13/2011 01:22:00 {532aa…
}
Colin Wilcox {732d2…} Remove Display Name Colin Wilcox FIM
Service
2/13/2011 01:22:00 {532aa…
}
Colin Wilcox {732d2…} Remove First Name Colin FIM
Service
2/13/2011 01:22:00 {532aa…
}
Colin Wilcox {732d2…} Remove Last Name Wilcox FIM
Service
2/13/2011 01:22:00 {532aa…
}
Colin Wilcox {732d2…} Add Manager gfort Garth Fort 9/22/2006 08:55:28 {8457b…
}
Colin Wilcox {732d2…} Remove Manager samanthas Garth Fort 9/22/2006 08:55:28 {8457b…
}
Colin Wilcox {732d2…} Add Employee
Type
FTE Garth Fort 9/22/2006 08:55:28 {8457b…
}
Colin Wilcox {732d2…} Remove Employee
Type
Contractor Garth Fort 9/22/2006 08:55:28 {8457b…
}

22. FIM Service DB
Data Mart
Staging
Repositor
y

31. Blue Section
http://www.microsoft.com/windowsazure/
http://www.microsoft.com/systemcenter/
http://www.microsoft.com/forefront/
http://www.microsoft.com/windowsserver/
http://www.microsoft.com/cloud/
http://www.microsoft.com/privatecloud/

32. www.microsoft.com/teched www.microsoft.com/learning
http://microsoft.com/technet http://microsoft.com/msdn
http://northamerica.msteched.com

37. Align
Experiences
Put the right tools in the right hands
Deliver a great experience for developers, information workers, and IT pros
Extensible
Platform
Build an extensible platform for present and future IdM solutions
Takes full advantage of state of the art technologies such as Web Services standards, federation,
strong auth, and workflow
Integrated Policy
Management
Provide a tightly integrated solution for policy management
Solve the spectrum of identity challenges with unified concepts and architecture
Enhance
existing
investment
Enhance existing IT investments
“Light up” Office, Windows, and System Center, and provide synergistic enhancements to other
connected systems