Book Image

Microsoft Identity Manager 2016 Handbook

By : David Steadman, Jeff Ingalls
Book Image

Microsoft Identity Manager 2016 Handbook

By: David Steadman, Jeff Ingalls

Overview of this book

Microsoft Identity Manager 2016 is Microsoft’s solution to identity management. When fully installed, the product utilizes SQL, SharePoint, IIS, web services, the .NET Framework, and SCSM to name a few, allowing it to be customized to meet nearly every business requirement. The book is divided into 15 chapters and begins with an overview of the product, what it does, and what it does not do. To better understand the concepts in MIM, we introduce a fictitious company and their problems and goals, then build an identity solutions to fit those goals. Over the course of this book, we cover topics such as MIM installation and configuration, user and group management options, self-service solutions, role-based access control, reducing security threats, and finally operational troubleshooting and best practices. By the end of this book, you will have gained the necessary skills to deploy, manage and operate Microsoft Identity Manager 2016 to meet your business requirements and solve real-world customer problems.
Table of Contents (22 chapters)
Microsoft Identity Manager 2016 Handbook
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Index

Multi-factor authentication


As in the MIM service, the PAM workflow activity supports MFA. To start this setup, we will need to first create our multi-factor authentication providers. Log in to the Azure portal at https://portal.azure.com:

Once created, navigate to the provider and download the SDK. The SDK is located on the left-hand side of the screen, as you see here:

Then, copy the ZIP file to the PAM/MIM Service server. The ZIP file contains key material used to authenticate to Azure, so keep it secured. Once copied, open the ZIP file, and you will see a pf folder. Open the pf_auth.cs file with Notepad:

Copy LICENSE_KEY, GROUP_KEY, and CERT_PASSWORD to the mfasetting.xml file. If you've kept the default while installing the MIM service, the mfasetting.xml file is located at C:\Program Files\Microsoft Forefront Identity Manager\2010\Service.

Once you have the settings entered and saved, create a folder in the directory called MfaCerts and then copy the p12 cert to this directory from pf...