IT Training

Description

This course follows on from the Foundation course, and makes use of presentation, discussion, demonstration, and a lot of hands-on exercises to cover the more advanced aspects of FIM, and put consultants in a position to be ready to deploy FIM 2010.

At the end of this course, the student will be able to:

• Manage Users, Groups, Policy and Credentials through the FIM 2010 portal


• Configure the portal to manage additional resource types, including look and feel, modified forms and navigation


• Handle more complex workflows and MPRs, including temporal MPRs and custom workflows


• Manage both Classic and Portal Synchronization Rule synchronization, using custom rules extension where necessary


• Build simple customs MAs


• Understand how to operate and troubleshoot an implementation, including using WMI, backup and disaster recovery considerations


• Understand the technical architecture and different installation topologies of FIM 2010


• Understand a wide range of techniques and architectures, and how to go about implementing more complex architectures

Course Outline

Module 1: FIM 2010 Reminder

The course starts with a tour of the features of FIM 2010 that were covered in the Foundation Course, pointing out those areas which this course will further develop. This is an opportunity to clear up any misunderstandings before launching into a lot of new stuff.

Module 2: Portal Configuration

The interface configuration is covered, including look and feel and navigation. The portal schema model is also considered: resources, attributes, bindings and validations; use of XPath and search scopes; usage keywords; localization etc; how to extend the schema.

Module 3: Understanding Synchronization

This module covers metaverse schema extension, and synchronization in depth. It explores the whole process, including holograms and how to troubleshoot synchronization errors. The new Synchronization Rules are mapped to the classic rules, identifying where to use each type, and where extensions are required.

Module 4: More Complex Workflows and MPRs

This module covers more complex workflows using functions and parameters, and temporal (time-based) MPRs for expiration, notification and delayed actions. We create and import some simple Windows Workflow Foundation workflows.

Module 5: Classic Rule Extensions

This module introduces (coded) extensions of classic MA configuration, including coded provisioning, attribute flow and deprovisioning. Topics include DLL extension architecture, metaverse and MA DLL concepts, creating and debugging extensions. Suggestions are made for effective management and best practices.

More Management Agents

This module covers File Based Mas, and provides notes about the other types not explicitly covered, before proceeding to cover extensible connectivity Mas - which are explained in terms of some practical examples - and finally mentioning password management extensions. The module attempts to satisfy the needs of the more developer-oriented students by providing examples (which are not covered in detail), while focussing on the configuration and outcomes.

Module 7: Installation and Alternative Topologies

This module covers installation, but also consideration of likely production topologies, how to scale it, and other considerations (like upgrade and migration of ILM installations).

Module 8: Operation, Troubleshooting and Reporting

This module looks at all the sources of information in FIM 2010, including: ILM 2007 features (MV and CS search, event log, operations tool etc.); troubleshooting via (for example) preview and analyzing Requests; extracting data directly from the synchronization database.

Module 9: Techniques and Architectures

This module takes what you have learned on this course so far and applies to it in a very practical way to a number of scenarios, including techniques such as: approaches to delta import and manual precedence, approaches to additional types of group management, and integrating Certificate Management

Audience

This 4 day course is intended for Systems Engineers and Architects (and it is also useful for developers) who need to gain a deeper understanding of how FIM 2010 can be implemented. They will have attended course MS-50382, Implementing Forefront Identity Manager 2010(previously course A-520). Students will find it an advantage if they can read simple Visual Basic code, but this is not an absolute pre-requisite. Where code is used, the emphasis will be on the need for code and how it fits into the overall architecture, rather than on the programming details.