FIM

FIM Technet Webcasts

The FIM product group has some great webcasts coming up on technet Forefront Identity Manager 2010 has RTM’ed This first webinar is using many of the slides that I created as part of our engagement to write the FIM 2010 Technical Overview Whitepaper (due out soon). Anyhow it makes me feel cool. 3/9/2010 6 PM Pacific time- TechNet Webcast: Forefront Identity Manager 2010: Technical Overview and Deployment (Level 300) http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032444011&Culture=en-US

Continue reading

FIM 2010 RTM Today!

Today, March 2, at the RSA conference Microsoft announced the release to manufacturing of Forefront Identity Manager 2010 (FIM, formerly codenamed ILM “2”) with General Availability starting next month. Download the eval here: Microsoft® Forefront™ Identity Manager 2010 Evaluation Version Yeah! FIM gives us capabilities for User provisioning (and deprovisioning), Group management, Self-Service Password Reset, Password Synchronization, Workflows with Approvals, User profile self-service management, and accomplishing these items through Declarative Provisioning.

Continue reading

Final Update for FIM RC1 released

On Friday the product group released Update 3 for Forefront Identity Manager 2010 RC1 available through connect https://connect.microsoft.com/site433/Downloads Major changes as part of Update 3 (my regurgitation and comments from the release notes): Fewer trips to the FIM Service event log – since the FIM MA export errors will now show up in the Synchronization Service Manager! Hallelujah! Less need for custom old style code Now more than 1 MA can be authoritative for deleting an object (resource) New functions for Sync Rules (Declarative Provisioning) – I guess I will have to update my function cheatsheet Null – not certain what they mean by this – null out the value or let another sync rule provide the value.

Continue reading

FIM RCDC explained in brief

In this post I attempt to give you the reader a quick overview of how the FIM RCDC works conceptually. As for the mechanics of modifying the RCDC the nearly complete but growing collection of documents downloadable from MSFT will suffice. As you will recall FIM is the new abbreviation for ILM, since it has been renamed Forefront Identity Manager, and RCDC is the Resource Control Display Configuration formerly known as the Object Visualization Configuration (OVC).

Continue reading

Answering my FIM RC 1 question

Thanks to Darryl Russi for answering my questions in my earlier post An Update to FIM RC1 where I was asked about something I had read in the release notes: Some of those items raise a few questions, like how to setup a FIM service that only takes requests from the sync service? Do we setup multiple FIM Service instances and then configure the FIM MA to talk to one of them, and not make that one available to web clients?

Continue reading

Identity Synchronization FIM 2010 HOL Irvine California

I will be at the Microsoft Technical Center in Irvine on Dec 1 and 2 presenting this HOL with Marvin Tansley of Gemalto. Identity Synchronization – Hands on Training **** Date: December 1-2, 2009 Location: 3 Park Plaza, Suite 1800 Irvine, CA 92614 949-263-3000 Microsoft, Gemalto and Ensynch invite you to a free 2-day training seminar and hands-on-lab on Microsoft’s Forefront Lifecycle Manager (FIM 2010). Come and learn how FIM 2010 can help you by delivering simplicity, agility and efficiency while increasing security and compliance within your enterprise identity infrastructure.

Continue reading

An Update to FIM RC1

Microsoft has posted an update to FIM RC 1, dated Nov 6. It looks like this update covers pretty much everywhere except Certificate Services (sorry Brian and Paul). The Release notes included in the download lists the follow improvements: Query and Sets Resolved a number of issues that resulted in incorrect dynamic set membership. Removed support for the use of the != operator with multivalued attributes.

Continue reading

Password Reset?

How would you feel if this was the only barrier between the hacker and your data – a single password reset question? Just one! I won’t tell you who this is since then you’ll just want to go after my data on that site. Oh well. The barn door won’t be shut until the wolf has gotten into the sheep http://feeds.feedburner.com/IdentityLifecycleManagerilmBestPractices

Continue reading

FIM RC 1 is here – what’s new?

FIM RC 1 is here. Microsoft released it on Sept 30th which is the end of Q3 of 2009 which means the ILM/FIM team at Microsoft met their stated deadline announced back in March. Here is the download: http://technet.microsoft.com/en-us/evalcenter/cc872861.aspx What’s new: Gil Kirkpatrick has a nice post about the differences in the data structure: Auditing FIM 2010 RC1 Darryl Russi a Sr. Test Lead at Microsoft has started blogging about FIM RC 1 performance:

Continue reading

AD RMS on R2 -- new Federation Features

AD RMS on Windows Server 2008 R2 adds a really slick feature blogged about here: Group Expansion for Federated Users Prior to R2 to issue a use license to a federated user they need to specifically be granted permissions. With Windows Server 2008 R2 you can create a contact matching the external federated user and then place the contact in the group and then they have the same RMS permissions as that group.

Continue reading