Book Image

Microsoft Identity Manager 2016 Handbook

By : David Steadman, Jeff Ingalls
Book Image

Microsoft Identity Manager 2016 Handbook

By: David Steadman, Jeff Ingalls

Overview of this book

Microsoft Identity Manager 2016 is Microsoft’s solution to identity management. When fully installed, the product utilizes SQL, SharePoint, IIS, web services, the .NET Framework, and SCSM to name a few, allowing it to be customized to meet nearly every business requirement. The book is divided into 15 chapters and begins with an overview of the product, what it does, and what it does not do. To better understand the concepts in MIM, we introduce a fictitious company and their problems and goals, then build an identity solutions to fit those goals. Over the course of this book, we cover topics such as MIM installation and configuration, user and group management options, self-service solutions, role-based access control, reducing security threats, and finally operational troubleshooting and best practices. By the end of this book, you will have gained the necessary skills to deploy, manage and operate Microsoft Identity Manager 2016 to meet your business requirements and solve real-world customer problems.
Table of Contents (22 chapters)
Microsoft Identity Manager 2016 Handbook
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Index

SSPR background


Let's assume Amber Adams has forgotten her AD password, and therefore, she is unable to authenticate properly to MIM. So, the solution that SSPR provides is to validate (authorize) the user.

Using SSPR, Amber can make an anonymous request for MIM to reset the password of the user account AAdams. In order for that to happen, we tell MIM to try to figure out who the requestor is. We add an authentication (AuthN) workflow, which gives Amber a chance to prove her identity. If the AuthN workflow proves to MIM that the requestor is indeed the user AAdams, it will allow Amber to reset her password.

Two built-in ways to allow people to verify their identity are the Question and Answer (QA) gate and the One-Time Password (OTP) gate. If you have Azure, you can configure multi-factor authentication to use MIM's new Phone gate too.

QA versus OTP

There are two different ways of doing SSPR—Question and Answer and One-Time Password. QA means that a user can reset their password by giving the...