Microsoft 50382 - Implementing Forefront Identity Manager 2010

Displaying courses for Australia [Change]

Overview

This four-day instructor-led course introduces and explains the features and capabilities of Microsoft Forefront Identity Manager 2010 (FIM), and provides an overview of the solution scenarios that FIM addresses. The course format includes presentation, discussion, demonstration, and many hands-on exercises. It is intended for students who have no previous Forefront Identity Manager 2010 or Microsoft Identity Lifecycle Manager 2007 (ILM) experience.

Objectives

After completing this course, students will be able to:

  • Understand FIM concepts and components.
  • Identify appropriate FIM scenarios.
  • Manage users, groups, and passwords using FIM.
  • Synchronize identity data across systems, such as Active Directory and HR.
  • Understand the issues involved in loading data (initial load, backup, and disaster recovery).
  • Configure security for different levels of user.
  • Manage password self-service reset and synchronization.
  • Automate run cycles.
  • Handle sets, simple workflows, and management policy rules (MPRs).

Audience

This course is intended for Systems Engineers, Developers, Architects, and Project Leaders who need to gain a good understanding of how Forefront Identity Manager 2010 can be applied to manage identity information across a number of directories or databases. It is also suitable for those who simply want to review the technology in some depth.

We can also deliver and customise this training course for larger groups saving your organisation time, money and resources. For more information, please make a note when you enquire.

Prerequisites

  • A sound understanding of the purpose and some experience of the workings of Active Directory.
  • A sound understanding of the purpose and some experience of the workings of Microsoft Exchange Server.
  • A sound understanding of the purpose and some experience of the workings of Microsoft SQL Server.

Syllabus

Module 1: Introducing Forefront Identity Manager 2010

This module is a tour of many of the built-in features of FIM focusing on the user experience. The student will explore the FIM interface, the high level architecture of FIM, and the business needs that FIM addresses. In this module, the student will examine FIM in its installed and configured state, whereas the rest of the course will be spent understanding how FIM works, and building the fully configured FIM from a raw installation. The lab explores creating a new user, managing groups and credentials for that user, and the experience of that new user.

Lessons

  • Introducing FIM
  • Synchronization Concepts
  • Other FIM Concepts

Lab : The FIM Experience

  • Log on and examine the environment
  • Add some new users and examine group memberships
  • Examine how groups are managed
  • The user experience

Module 2: The Synchronization Service Manager

This module introduces the FIM Synchronization Service Manager and explains its features through scenarios that do not use the FIM Portal. It introduces the main tools (such as Metaverse Designer, Operations Tool, and Joiner), and covers the basic configuration of a Management Agent along with run profiles, results verification, and simple Metaverse search. During the lab, students will create a new Management Agent for a simple HR system.

Lessons

  • The Synchronization Service
  • The Synchronization Service Manager: The Management Agents Tool
  • Synchronization Service Manager: Other Tools

Lab : Importing and Synchronizing Data

  • Connect to an HR data source and import identity data
  • Examine the metaverse
  • Importing changes

Module 3: More About Synchronization

This module looks at various types of Management Agent (MA), including LDAP and file-based sources. It covers concepts such as schema discovery, filters, join and projection rules, connectors and disconnectors, joining, provisioning, deprovisioning, and different kinds of attribute flow. In the lab, students create two more Management Agents, and establish a simple data-driven scenario for managing a directory (AD LDS).

Lessons

  • Inbound Synchronization
  • Outbound Synchronization

Lab : Joining Data from Another MA

  • Creating and configuring the MA
  • Importing, synchronizing, and joining data
  • Breadcrumbing and testing

Lab : Provisioning AD LDS

  • Creating an AD LDS MA
  • Provisioning AD LDS

Module 4: The FIM Service and Portal

This module introduces the FIM Synchronization Service Manager and explains its features through scenarios that do not use the FIM Portal. It introduce the main tools (such as Metaverse Designer, Operations Tool, and Joiner), and covers the basic configuration of a Management Agent along with run profiles, verifying results, and simple Metaverse search. During the lab, students create a new Management Agent for a simple HR system.

Lessons

  • Introducing the Portal
  • Integrating the FIM Service and FIM Synchronization Service

Lab : Managing Users in the FIM Portal

  • Examining simple sets and MPRs
  • Create and modify a user

Lab : Creating the FIM MA and Synchronizing

  • Create the FIM MA
  • Synchronizing data

Module 5: Managing Synchronization from the Portal

This module explores creation of an Active Directory MA, and configuration via the portal to manage mailbox-enabled users in AD. Aspects of this process include synchronization rules, workflows, and management policy rules, including complex attribute flows. In the labs, students configure FIM so that users are automatically created (provisioned) into AD, renamed, and removed (deprovisioned) as necessary.

Lessons

  • Synchronization Rules
  • Outbound Synchronization Rules
  • Managing Users in Active Directory
  • More About Synchronization Rules

Lab : Inbound Synchronization Rules

  • Using a synchronization rule to manage the HR data MA

Lab : Synchronizing Active Directory Users

  • Provision users in Active Directory
  • Configure automatic OU provisioning and population based on DN

Module 6: Managing Credentials with FIM

This module primarily explores passwords. First, it addresses the essentials of Certificate Management, and then explores in detail the self-service password reset and password synchronization functions. The two labs cover all aspects of password management in FIM (with the exception of writing custom password management workflows and extensions).

Lessons

  • FIM Password Management
  • Password Self-service Reset
  • Synchronizing Passwords - PCNS
  • FIM Certificate Management

Lab : Password Self-service

  • Verify and modify the environment
  • Modify the configuration for password registration and reset
  • Testing password registration and reset
  • Configuring password reset lockout

Lab : Configuring PCNS

  • Configuring PCNS

Module 7: Group Management

This module covers the management of distribution and security groups, including the relationship between groups in Active Directory and other systems. Synchronization rules, workflows, and MPRs are explored further, along with the configuration of workflow approvals.

Lessons

  • Groups and the Portal
  • Managing Groups in Active Directory

Lab : Managing Groups

  • Distribution groups
  • Provisioning distribution groups in Active Directory
  • Security groups
  • Provisioning security groups in Active Directory

Module 8: Other Considerations

This module examines management policy rules (MPRs) - perhaps the most important feature of FIM. It explores the different types of management policy rules, their different uses, how they are processed, and how to troubleshoot them. Then it examines some operational considerations, such as the management of run cycles using scripts, and also covers backup, restore, and disaster recovery.

Lessons

  • Managing MPRs
  • Operations

Lab : Portal Security

  • Configuring portal permissions

Lab : Examining Requests

  • Examine the requests concerning group membership changes

Lab : Backup, Restore, and Disaster Recovery

  • Perform a data reload
  • Backup
  • Restore

Lab : MA Run Scripts

  • Running MA run profiles with scripts

Lab : Finishing Touches

  • Finishing touches

Training provider

Teaching mode: Classroom - Instructor Led
Duration: 4 days
Gooroo has partnered with the global leaders in IT training to give you access to quality training, personalised to you, targeted at increasing your job opportunities and salary.

Our pricing

We do not display pricing as Gooroo members qualify for special discounts not available elsewhere. You must enquire through Gooroo to get this benefit.

New courses are happening all the time

Our partner's expert training consultant will provide you with the times and all the details you need. Enquire today.