Book Image

Microsoft Identity Manager 2016 Handbook

By : David Steadman, Jeff Ingalls
Book Image

Microsoft Identity Manager 2016 Handbook

By: David Steadman, Jeff Ingalls

Overview of this book

Microsoft Identity Manager 2016 is Microsoft’s solution to identity management. When fully installed, the product utilizes SQL, SharePoint, IIS, web services, the .NET Framework, and SCSM to name a few, allowing it to be customized to meet nearly every business requirement. The book is divided into 15 chapters and begins with an overview of the product, what it does, and what it does not do. To better understand the concepts in MIM, we introduce a fictitious company and their problems and goals, then build an identity solutions to fit those goals. Over the course of this book, we cover topics such as MIM installation and configuration, user and group management options, self-service solutions, role-based access control, reducing security threats, and finally operational troubleshooting and best practices. By the end of this book, you will have gained the necessary skills to deploy, manage and operate Microsoft Identity Manager 2016 to meet your business requirements and solve real-world customer problems.
Table of Contents (22 chapters)
Microsoft Identity Manager 2016 Handbook
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Index

Modern app and TPM virtual smart card


In the previous chapter, we configured the Modern App for The Financial Company. Our next step is to allow the enrollment of the virtual smart card deployment by deploying the certificate template and updating the policy template.

First, enable the MIM CM REST API by setting CLM.WebApi.Enabled to true inside the web.config file and make sure CLM.WebApi.Enabled is set to true, as follows:

Another useful setting is adding error logging for the REST API controllers under <system.diagnostics> of web.config, as follows:

<add name="Microsoft.Clm.Web.API" value="4" />

This setting allows errors from the REST interface to be written to the event log along with a correlation ID. The correlation ID is sent to the client, and you can trace the error all the way back to its origin. More information on the REST API for CM can be found at http://bit.ly/MIMCMRestAPI.

Creating a certificate template

We will now create a certificate template in the CA. Open CA...