IAM with Microsoft Identity Manager 2016

What is Identity & Access Management (IAM)

IAM means the establishment and management of individual users roles and credentials to make sure that the individual credentials are valid and he/she is authorized to access the organization line-of-business applications and/or assets. Also it is required to make sure that the individual credentials and access must be revoked/removed when he/she is leaving the organization.

Why organisations need Identity Management Solution?

Small, Medium and Large Organisations deploy Identity and Access Management (IAM) Solutions to make sure that they can meet the security challenges for all integrated business applications located on-premises and on the cloud. Having Identity Management Solution deployed in the organisations; users can use single identity to access all the business applications as per their role and making change in one identity solution will synchronize their details in other identity solution.

IAM is very useful to

• Provide users the right access for the data and services
• Integration of organisation identity solution with 3rd party identity solutions
• Consistent User experience for smooth authentication and authorization
• and others

ROI from Identity & Access Management Solutions

Every organization invest in technology with ROI in mind and in the world of IAM Solutions is not an IT issue but a challenge for C-Level Business Executives and/or Investors where information/data is the most important asset of the organization. An advanced Identity & Access Management solution is the core strength of an organization where organization will receive the return-on-investment in terms of being ready to integrate with any new solutions, integrating with 3rd party applications and/or identity repository stores, saving help-desk calls and capable to protect its assets from all external threats.

What is Identity Life cycle Management

Identity Life cycle management is the process of

• Provisioning of User Identity
• De-Provisioning of User Identity
• Identity synchronization
• Security Principal Creation
• Attribute Management
• Identity Aggregation  and Delete

Microsoft Identity Manager (MIM) 2016

• MIM 2016 is the latest version of Microsoft’s Identity and Access management (IAM) product suite which build on top of FIM 2010 R2 with additional capabilities of hybrid experience, Certificate Management (CM) and Privilege Access Management (PAM) REST APIs.
• MIM 2016 replaces Forefront Identity Manager (FIM) 2010 R2
• MIM 2016 provides managed synchronization between on-premises Active Directory Forest and Azure Active Directory
• MIM 2016 provides a broad range of services including user provisioning/de-provisioning, authentication/authorization of other LOB applications, BYOD, and data protection etc.

Microsoft Identity Manager 2016 Brief History

Microsoft Identity Manager 2016 Features

MIM 2016 features are

• Identity data management and synchronization
• Self-Service Identity/password Management
• Dynamic Group Membership
• Reporting and Auditing
• Single Sign-On using SAML and other Federation Technologies
• Creation of Windows Accounts and Other Accounts
• Automation using PowerShell Cmdlets
• Restful APIs for integration with 3rd parties for identity related tasks
• Authentication and authorization workflow
• Credentials management
• Certificate management
• etc.

Where you use Microsoft Identity Manager 2016 ?

The most common scenarios are

1. Cloud-ready Identities - MIM 2016 prepares user identities in on-premises Active Directory for synchronization with Azure Active Directory

2. Self-Service Capability - MIM 2016 provides capabilities for password reset with Azure multi-factor authentication and joining to dynamics active directory groups with workflow approvals and certificate management.

3. Reporting and Auditing - MIM 2016 protects admin Accounts by providing privileged access and also provide new security protocols.

4. IAM Solutions for modern Hybrid Infrastructure - MIM 2016, on-premises Active Directory and Azure Active directory work together for an organization and secure the organization hybrid infrastructure.

5. Seamless integration - MIM 2016 seamlessly integrate with on-premises identities store like Active Directory, LDAP, Oracle, etc to provide consistent experience for on-premises applications as well as SaaS solutions.

5. New REST based APIs for AuthN/AuthZ - Programmatic interface for integrating MIM 2016 with other 3rd party solutions.

and others.