Upgrading Identity Lifecycle Manager 2007 to Forefront Identity Manager 2010

Exercise 4: Add another user and see different permissions being applied

Exercise 1: Add yourself to a group

Exercise 2: Creating a distribution group

Exercise 3: Creating a criteria-based group

After completing this module, students will be able to:

Understand the additional identity management requirements that FIM addresses (as compared to ILM 2007).

Understand the very high level architecture of FIM.

Operate FIM as a user, understanding the high level functionality.

This module introduces and explores the key concepts: sets, activities, workflows and policies, how permissions are granted, how workflows are triggered, and different types of workflow.

Lesson 1: Policies, Sets, Workflows – Concepts, Design Philosophy

Lesson 2: Policies – Permission-granting (Only) MPRs

Lesson 3: Workflow MPRs

Exercise 1: A look at a permission-granting MPR and some sets

Exercise 2: Permission-granting MPRs for self-service

Exercise 3: Make some changes to permission-granting MPRs

Exercise 1: Examine some workflows

Exercise 2: Examine some other MPRs

Exercise 3: Modify a workflow MPR

After completing this module, students will be able to:

Understand how sets, workflows, and management policy rules (MPRs) are used to manage requests.

Make simple modifications to permissions and other MPR features.

This module provides detailed coverage of users and groups, including data entry; interesting attributes; different types of groups; group expiration, renewal, and ownership; the relationship with groups in Active Directory and other systems; and limitations.

Lesson 1: Users and the Portal

Lesson 2: Groups and the Portal

Exercise 1: Examine the attributes of a user account

Exercise 1: Groups calculated on other groups

After completing this module, students will be able to:

Manage users in the FIM Portal, including sources of user objects, entering data, searching, and attributes, etc.

Manage groups in the FIM Portal, including the different types of groups and how they relate to Active Directory.

Understand the part that MPRs play in managing users and groups.

This module begins with a reminder of how synchronization works in ILM 2007. Then it covers how FIM can be used to provision, manage, and deprovision AD and other sources; how FIM attributes authority and precedence; how to create codeless outbound inbound rules; and the coexistence of classic and codeless rules.

Lesson 1: Declarative Synchronization Rules Overview

Lesson 2: Outbound Declarative Sync Rules

Lesson 3: Inbound Synchronization

Lesson 4: Managing Active Directory without Code

Exercise 1: Investigate AD provisioning

Exercise 2: Investigate the AD outbound synchronization rule

Exercise 3: Add another outbound flow to AD

Exercise 1: Investigate and modify inbound synchronization

Exercise 1: Make the DNs depend on department

Exercise 2: Enabling/disabling/deprovisioning an AD account according to user status

Exercise 3 (Optional interactive): Use an additional rule for disabling accounts

Exercise 1: Creating a New Source and Provisioning it with Accounts

After completing this module, students will be able to:

Understand the benefits and limitations of synchronization rules (versus “classic” rules).

Implement inbound and outbound synchronization rules.

Configure synchronization rules to manage Active Directory.

In this module synchronization is further explored, including the various scenarios in which FIM can be used; sources that are authoritative for objects, such as HR Feeds; the inclusion of sources that are not authoritative for objects, such as telephone systems; data discovery issues such as joining and data cleansing; and disaster recovery issues.

Lesson 1: Scenarios

Lesson 2: Incorporating Objects from Another Source

Lesson 3: Non-authoritative Sources and Initial Loads

Exercise 1: Importing the employees and creating user accounts for them in the FIM portal

Exercise 2: Create and import an inbound sync rule for the HR Data

Exercise 3: Configure the outbound flow and synchronize

Exercise 4: Final configuration of precedence, etc.

Exercise 1: Telephone data

After completing this module, students will be able to:

Understand the scenarios that involve inclusion in or migration to the FIM Portal.

Configure FIM for load and migration of existing data.

Respond appropriately to joining and data cleansing challenges.

This module deals with password issues: password reset and the relationship with ILM 2007 password management and synchronization.

Lesson 1: FIM Password Management

Lesson 2: Password Self-service Reset

Lesson 3: Synchronizing Passwords – PCNS

Lesson 4: FIM Certificate Management

Exercise 1: Verify and modify the environment

Exercise 2: Modify the configuration for password registration and reset

Exercise 3: Testing password registration and reset

Exercise 4: Configuring password reset lockout

Exercise 1: Configuring PCNS

After completing this module, students will be able to:

Configure self-service password reset (and lockout) for chosen portal users.

Configure password synchronization across systems.

Identity where Certificate Management might be appropriate.

This module covers simple installation, in addition to likely production topologies, how to scale it, and other considerations (such as upgrade and migration).

Lesson 1: Architecture

Lesson 2: Synchronization Service: Changes Since ILM 2007

Lesson 3: FIM Installation

Lesson 4: Deployment Topologies

After completing this module, students will be able to:

Understand the architecture of FIM and the new features that have been added to the synchronization engine.

Understand how FIM is installed, and the various possible topologies.

This module covers interface configuration, including look and feel and navigation. The portal schema model is also considered: objects, attributes, bindings and validations; use of XPath and search scopes; usage keywords; localization, etc.; how to extend the schema; and the relationship with the metaverse schema.

Lesson 1: Portal Configuration Basics

Lesson 2: Visualizing Resources

Lesson 3: Resource Types, Attributes, and Bindings

Lesson 4: Typical Steps for Extending Schema

Exercise 1: Portal branding

Exercise 1: Add a new customer resource type

Exercise 2: New sets

Exercise 3: Create a search scope for customers

Exercise 4: Create RCDCs and navigation bar links

Exercise 5: Import the new resources to the metaverse

Exercise 6: Provision customers into AD as contacts

Exercise 7 (Optional interactive): Additional features

After completing this module, students will be able to:

Configure the portal, including home page, navigation bar, and search scopes.

Configure the visualization of resources such as users and groups.

Extend the schema to include new attributes, and new resource types.

This module looks at all the sources of information in FIM, including: ILM 2007 features (MV and CS search, event log, operations tool, etc.); managing requests and approvals; and auditing and reporting. Then it covers operational issues such as managing run cycles, backup procedures, monitoring activity, etc.

Lesson 1: Operations

Lesson 2: Managing MPRs and Requests

Lesson 3: Other Sources of Information

Exercise 1: Export data

Exercise 2: Compare data states

Exercise 1: Examine the requests concerning group membership changes

Exercise 2: Construct and use a search scope to examine requests falling in a time period

After completing this module, students will be able to:

Use the additional features of FIM (versus ILM 2007) for operation, monitoring, and troubleshooting.

Manage and troubleshoot requests.

Use Windows PowerShell cmdlets for exporting and importing FIM Portal configuration.

This module covers more complex workflows using functions and parameters, temporal (time-based) events, expiration, notification, and delayed actions. It examines Windows Workflow Foundation workflows and how to import them.

Lesson 1: Time-based MPRs

Lesson 2: Workflow Functions and Parameters

Lesson 3: Custom Workflow Activities

Exercise 1: Time-based features

Exercise 1: Random password generation and notification

Exercise 2: Generate attribute values

Exercise 1: Calling a simple WF activity from FIM

Exercise 2: Add pre-built activities to your custom activity

Exercise 3: Install a fully integrated custom activity

After completing this module, students will be able to:

Create and manage time-based groups, sets, and MPRs.

Create and use workflow parameters.

Import workflow activities.

Create a simple workflow activity.