Everand Logo

Welcome to Everand!

  • Discover millions of ebooks, audiobooks, and so much more with a free trial

    Only $11.99/month after trial. Cancel anytime.

    Microsoft Identity Manager 2016 Handbook
    Microsoft Identity Manager 2016 Handbook
    Microsoft Identity Manager 2016 Handbook
    Ebook1,038 pages6 hours

    Microsoft Identity Manager 2016 Handbook

    By David Steadman and Jeff Ingalls

    4/5

    ()

    Read preview

    About this ebook

    About This Book
    • Get to grips with the basics of identity management and get acquainted with the MIM components and functionalities
    • Discover the newly-introduced product features and how they can help your organization
    • A step-by-step guide to enhance your foundational skills in using Microsoft Identity Manager from those who have taught and supported large and small enterprise customers
    Who This Book Is For

    If you are an architect or a developer who wants to deploy, manage, and operate Microsoft Identity Manager 2016, then this book is for you. A basic understanding of Microsoft-based infrastructure using Active Directory is expected. Identity management beginners and experts alike will be able to apply the examples and scenarios to solve real-world customer problems.

    LanguageEnglish
    PublisherPackt Publishing
    Release dateJul 19, 2016
    ISBN9781785284083
    Microsoft Identity Manager 2016 Handbook

    Related to Microsoft Identity Manager 2016 Handbook

    Related ebooks

    Programming For You

    View More
    View More

    Related podcast episodes

    Related articles

    • Article

      Build Your Own Distro With NixOS

      Apr 4, 2023

      Credit: https://nixos.org Matt Holder has been a fan of the open source methodology for over two decades and uses Linux and other tools where possible. In his spare time, he enjoys listening to music and reading. We’re continuing our look at next-gen

      10 min read

    • Article

      Raspberry Pi 4 B

      Aug 12, 2019

      Raspberry Pi 4 B
      5 min read

    • Article

      Year Of The Linux Desktop (on Windows)

      Oct 19, 2021

      Getting an actual Linux desktop running on WSL 2.0 on Windows 11 proved a little tricky. In fairness, WSL was built to run applications, not to act like a conventional virtual machine. It’s not really surprising that Gnome and KDE won’t work. They re

      3 min read

    • Article

      RASPBERRY Pi STREAMING

      Jul 27, 2021

      RASPBERRY Pi STREAMING
      1 min read

    • Article

      Mailserver MAILSERVER

      Nov 16, 2021

      Mailserver MAILSERVER
      4 min read

    • Article

      Seagate EXOS 20TB

      May 3, 2022

      Seagate EXOS 20TB
      2 min read

    • Article

      How We Tested…

      Oct 19, 2021

      We wrote our content using Markdown, creating five sites. The content was all placed in a local directory, though the files are all synchronised to Git repositories. Static site generators are actually fairly simple collections of scripts that take y

      1 min read

    • Article

      Using Active Directory with Debian & Samba

      Feb 9, 2021

      Like it or not, a lot of authentication uses Active Directory (AD) to manage users and resources. It’s a staple of the Windows world and until recently (Samba 4) there was no way to have a complete AD stack in FOSS to “talk proper AD”. Luckily, with

      9 min read

    • Article

      Integrated Workplace Management Systems

      Dec 23, 2018

      Property and facilities management are data-rich operating worlds. This is becoming even more complex as the Internet of Things (IoT) provides the capability to imbed sensors and diagnostic tools to monitor the use and performance of everything in re

      4 min read

    • Article

      Supercomputer On A Platter

      Apr 1, 2022

      CHENNAI-HEADQUARTERED automobile major TVS Motor Company uses high-performance computing (HPC) for running R&D simulations and testing the aero-dynamics of two-wheelers, which allows it to make the vehicles stable at speed and more efficient, cool en

      7 min read

    • Article

      Robo-marshal

      May 3, 2019

      Robo-marshal
      8 min read

    • Article

      Bitwarden vs LastPass

      Mar 2, 2021

      Bitwarden vs LastPass
      4 min read

    • Article

      Business In The Cloud

      Oct 1, 2020

      Business In The Cloud
      7 min read

    • Article

      Bitwarden vs LastPass

      Mar 22, 2021

      Bitwarden vs LastPass
      4 min read

    • Article

      Remote Support Software 2023

      Sep 7, 2023

      Remote Support Software 2023
      3 min read

    • Article

      NetSupport Manager 14

      Sep 7, 2023

      PRICE 1-500 systems, perpetual licence, £10 each exc VAT from netsupportmanager.com SMBs that want the best on-premises remote support solution need look no further than NetSupport Manager (NSM). Now well into its third decade, NSM has been continuou

      2 min read

    Related categories

    Reviews for Microsoft Identity Manager 2016 Handbook

    4/5

    1 rating0 reviews

    What did you think?

    Tap to rate

    Review must be at least 10 words

      Book preview

      Microsoft Identity Manager 2016 Handbook - David Steadman

      problem.

      Chapter 1. Overview of Microsoft Identity Manager 2016

      Microsoft Identity Manager 2016 (MIM 2016) is not one product but a family of products working together to mitigate challenges regarding identity management. In this chapter, we will discuss the MIM family and provide a brief overview of the major components available. The following diagram shows a high-level overview of the MIM family and the components relevant to an MIM 2016 implementation:

      Within the MIM family, there are some parts that can live by themselves and others that depend on other parts. To fully utilize the power of MIM 2016, you should have all the parts in place, if possible. At the center, we have MIM Service and MIM Synchronization Service (MIM Sync). The key to a successful implementation of MIM 2016 is to understand how these two components work—by themselves as well as together.

      The Financial Company

      The name of our fictitious company is The Financial Company. The Financial Company is neither small nor big. We will not give you any indication of the size of this company because we do not want you to take our example setup as being optimized for a company of a particular size, although we will provide some rough sizing guidelines later.

      As with many other companies, The Financial Company tries to keep up with modern techniques within their IT infrastructure and is greatly concerned with unauthorized security issues. They are a big fan of Microsoft and live by the following principle:

      If Microsoft has a product that can do it, let's try that one first.

      The concept of cloud computing is still somewhat fuzzy to them, and they do not yet know how or when they will be using it. They do understand that in the near future, this technology will be an important factor for them, so they have decided that for every new system or function that needs to be implemented, they will take cloud computing into account.

      The challenges

      During a recent inventory of the systems and functions that their IT department supported, a number of challenges were found. We will now have a look at some of the identity management (IdM)-related challenges that were uncovered.

      Provisioning of users

      The Financial Company discovered a new employee or contractor may wait up to a week before accounts are provisioned to the various required systems, and the correct access is granted to each person to do his/her job. The Financial Company would like account provisioning and proper access granted within a few hours.

      The identity life cycle procedures

      A number of identity life cycle management issues were found.

      Changes in roles took way too long. Access based on old roles continued even after people were moved to a new function or after they changed their job. The termination and disabling of identities was also sometimes missed. A security review found active accounts of users who had left the company more than six months ago.

      The security review found one HR consultant who had left The Financial Company months ago that still had VPN access and an active administrative HR account. The access should have been disabled when the project was completed and the consultant's contract had ended.

      The Financial Company would like a way of defining identity management policies and a tool that detects anomalies and enforces their business policies. The Financial Company would like business policy enforcement to take no more than a few hours.

      Highly privileged accounts (HPA)

      The Financial Company has been successful in reducing the number of powerful administrative accounts over the last few years; however, a few still exist. There are also other highly privileged accounts and a few highly privileged digital identities, such as code signing certificates. The concern is that the security of these accounts is not as strong as it should be.

      Public key infrastructure (PKI) within The Financial Company is a one-layer PKI, using an Enterprise Root CA without hardware security module (HSM). The CSO is concerned that it is not sufficient to start using smart cards because he feels the assurance level of the PKI is not high enough.

      Password management

      The helpdesk at The Financial Company spends a lot of time helping users who have forgotten their password. Password resets are done for internal users as well as partners with access to shared systems.

      Traceability

      The Financial Company found that they had no processes or tools in place to trace the status of identities and roles historically. They wanted to be able to answer questions such as:

      Who was a member of the Domain Admins group in April?

      When was John's account disabled, and who approved it?

      The environment

      The following diagram gives you an overview of the relevant parts of the current infrastructure within The Financial Company:

      The diagram does not represent any scaling scenarios but rather shows the different functions we will be using in this

      Enjoying the preview?
      Page 1 of 1