I answered three questions to enroll my test users. These questions are the usual assortment of “what was your first pet’s name?” type of questions. As is typical of most password reset systems, the user must enroll by answering a series of security questions. One of the best examples of this during my tests with the product were in self-service password reset. Although my tests used only Microsoft Outlook and Sharepoint for notification and resource examples, FIM 2010 can use other platforms including Lotus Notes.įIM 2010 did a good job at driving down typical help-desk costs. I created several groups that used either a manual request, “managed by” or other criteria to create groups of users in my test environment. Workflows that automated group membership have also been wizard-enabled so that business users can- with a minimum of training- create dynamic groups based on user attributes. This meant that I was able to bring employee data from my human resources system into FIM 2010, and after configuring a federated trust environment with a completely different test organisation, assign these employees to groups with various levels of authority to view and use resources at both organisations. The upside to this wizard is that Microsoft has indeed made it possible for an IT pro- as opposed to a developer or scripting expert- to configure the management agent. The amount of clicking needed to configure the management agent basically smoked my mousing finger. Once I discovered that I had to constantly click back and forth between the source and destination pairing, the process of configuring the management agent went from bewildering to annoying. The tricky part is that they rather poorly designed wizard interface basically hides the pairing process. Basically, I used the FIM Synchronization Service Manager to create an attribute management agent to automate the import of human resource information about employees into FIM 2010. What was likely a developer job in Microsoft ILM 2007 is now a- somewhat tricky- wizard-driven operation to map attributes used in a human resources application to those used in FIM 2010. Group management is an area that benefited from lowering the expertise level required to operate FIM 2010. Organisations where staff tends to quickly move into and out of groups will especially benefit from FIM 2010 group management tools. Mastering the group management and creation tools will likely be one of the keys to seeing a return on investment when using FIM 2010. While the workflow logic is flexible and allows for fairly sophisticated selection and approval criteria, the learning curve will likely be short for most IT staff. IT professionals who have a basic understanding of the business needs of their organisation can use FIM 2010 to automate group creation and management workflows.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |