Book Image

Microsoft Identity Manager 2016 Handbook

By : David Steadman, Jeff Ingalls
Book Image

Microsoft Identity Manager 2016 Handbook

By: David Steadman, Jeff Ingalls

Overview of this book

Microsoft Identity Manager 2016 is Microsoft’s solution to identity management. When fully installed, the product utilizes SQL, SharePoint, IIS, web services, the .NET Framework, and SCSM to name a few, allowing it to be customized to meet nearly every business requirement. The book is divided into 15 chapters and begins with an overview of the product, what it does, and what it does not do. To better understand the concepts in MIM, we introduce a fictitious company and their problems and goals, then build an identity solutions to fit those goals. Over the course of this book, we cover topics such as MIM installation and configuration, user and group management options, self-service solutions, role-based access control, reducing security threats, and finally operational troubleshooting and best practices. By the end of this book, you will have gained the necessary skills to deploy, manage and operate Microsoft Identity Manager 2016 to meet your business requirements and solve real-world customer problems.
Table of Contents (22 chapters)
Microsoft Identity Manager 2016 Handbook
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Index

Certificate management clients


MIM comes with two options for enterprises to allow users to enroll or manage certificates. We have the classic ActiveX plugin that has been with us since the CLM (Certificate Lifecycle Manager) days of the CM smart card enrollment. Now, we also have a new option using the Modern App with the new REST API. In this chapter, we will go over the installation of these components and also the configuration of the MIM CM Modern App depending on your environment.

Installing the MIM CM client

On the client computers where users manage smart cards (in some cases, all workstations), you will need to install some client components.

Note

You should install the x86 client software, even if the operating system is a 64-bit one. You have to match your MIM CM client with the type of Internet Explorer that the users are using. (Even on 64-bit Windows, we almost always use the 32-bit version of IE.)

The installation can be automated and settings controlled using GPOs, but showing...