Header Ads

recent

Microsoft Identity Manager (MIM) 2016 Introduction


Microsoft Identity Manager (MIM) 2016 is the identity and access management on new platforms, it helps to manage the user's, credentials, policies, and access within your infrastructure, it is advance version of FIM 2010 with new functionality included. MIM 2016 also a hybrid potential, privileged access management capabilities.

Advance to FIM there are many additional functionality included, MIM 2016 provides new enhanced features, below are few of them.
  • It includes new function for self-service for Account unlock and password reset and cloud (Azure) Multifactor Authentication (MFA).
  • Certificate management new functionality
    • Advance Troubleshooting capabilities based on updated event function
    • Multi-forest support
    • New windows app for virtual smartcard
    • REST API Reference Certificate Management
  • Privileged identity management


Privileged Identity Management

Privileged Identity Management controls and manages administrative access by providing temporary, task-based access to sensitive resources. You can give users only as much permission as necessary, which lowers the chances of a cyber attacker gaining full administrative access. In addition, Privileged Identity Management extracts and isolates administrative accounts from existing Active Directory forests. it supports an on-premises Privileged Identity Management solution for managing Active Directory. 

Self-Service and Hybrid


MIM 2016 works together with Azure AD to give you control over your on-premises and cloud. Hybrid reporting in Azure AD presents your cloud and on-premises data in one place. It will give you ability to Self-Service Password Reset portal supports Azure multi-factor authentication (MFA).


MIM 2016 Topology


You can install and configure Microsoft Identity Manager (MIM) on standalone server or on multiple servers in multiple configurations. The topology that you select for your deployment affects the performance that you can achieve from MIM. This article introduces multiple deployment topologies that you may consider implementing.

Multitier Topology

The multitier topology is frequently used topology. It offers you more flexibility. The MIM Portal, MIM Service, and databases are separated into multiple tiers and install deployed on multiple servers. Multitier topology adds flexibility in scaling the different MIM components. For example, you can scale the MIM Portal horizontally by adding additional servers in a Network Load Balancing (NLB) cluster. Similarly, you can scale the MIM service by using an NLB cluster and by increasing the number of computers (nodes) in the cluster as needed

When you designing your topology, you should know about each component involved and how they all interact with each other. Below are list of component which are part of multitier topology.

  • Microsoft SQL Server - MIM Service and MIM Sync Service both store their data in SQL databases.
  • MIM Service - a web service that implements MIM 2016 identity management functionality.
  • MIM Synchronization Service - Synchronizes data with other identity systems.
  • MIM Portal - an interface for password resets, group management, and administrative operations.


We will continue to see step by step process how to install and configure MIM in our next article.....

3 comments:

  1. Replies
    1. thanks, will more on this in next couple of articles

      Delete
  2. Windows 8.1 brings the alternative to permit logbook arrangements, email warnings and so on all from the bolt screen, before you login.Solar in california

    ReplyDelete

Systemadminworld. Powered by Blogger.