Book Image

Microsoft Identity Manager 2016 Handbook

By : David Steadman, Jeff Ingalls
Book Image

Microsoft Identity Manager 2016 Handbook

By: David Steadman, Jeff Ingalls

Overview of this book

Microsoft Identity Manager 2016 is Microsoft’s solution to identity management. When fully installed, the product utilizes SQL, SharePoint, IIS, web services, the .NET Framework, and SCSM to name a few, allowing it to be customized to meet nearly every business requirement. The book is divided into 15 chapters and begins with an overview of the product, what it does, and what it does not do. To better understand the concepts in MIM, we introduce a fictitious company and their problems and goals, then build an identity solutions to fit those goals. Over the course of this book, we cover topics such as MIM installation and configuration, user and group management options, self-service solutions, role-based access control, reducing security threats, and finally operational troubleshooting and best practices. By the end of this book, you will have gained the necessary skills to deploy, manage and operate Microsoft Identity Manager 2016 to meet your business requirements and solve real-world customer problems.
Table of Contents (22 chapters)
Microsoft Identity Manager 2016 Handbook
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Index

Attestation


Like the Integration module, Attestation is a nice add-in to the Core suite. Attestation is used to verify the users and permissions of an orgunit or an application.

Most businesses do not have this level of auditing regarding who has access to what. With this, the business can confirm that the users have all the permissions they need with the application owner to steward signoff.

Let's take The Financial Company as an example. We have the user ALee, who is the manager of the east compliance staff. But we need to do a complete audit of all the applications. Before we can set up the Attestation module, we need to make sure the e-mail setting is configured for BHOLD Core. To do this, log in to the Core web user interface. Then click on Home, and then on Values. Click on Modify, and fill in the appropriate setting for e-mail:

Next, after launching the Attestation Campaign's shortcut on your screen, you will notice Campaign Definition. This lists all the ongoing campaigns currently...