Comparing forefront identity manager vs. other identity managers

Courtesy of InfraMatix

http://www.IDMChecklist.com

Comparing Forefront Identity Manager

vs. Other Identity Managers

http://www.idmchecklist.com/

Here we compare Microsoft

FIM with Oracle and CA,

the market leaders

Sponsored by http://www.IDMChecklist.com

Veera Sandiparthi Founder of InfraMatix


Microsoft Forefront Identity

Manager




Microsoft’s Forefront Identity

Manager is quite different from

CA and Oracle




Some of the key differences

include:




• FIM replaces the concepts

of roles and attributes with

policy objects




• The system is more tightly

integrated with the Windows

environment




• User self-service lets users

request access through

applications via group

membership




• Microsoft has fewer

governance, certification

and audit functions




• Microsoft calls connectors

management agents




• Workflow drives

synchronization




• Programmers use Visual

Studio to design workflows




• Access management is

limited to .Net, SAP with

Kerberos, UNIX login with

Active Directory, and

a few others




Oracle




Differences between Oracle

and Microsoft are:




• Administrators can assign

risk points to user metadata

for certification purposes




• Provisioning is driven by

roles and attributes




• Oracle includes a forms

process for manual

provisioning to legacy apps

that do not have an API




• Reconciliation flags users

who have been granted

access outside the

provisioning process




• Administrators can use

Oracle IDM or the

JDeveloper Java IDE for

workflow design




CA




Difference between CA and

Microsoft include:




• CA is the first to offer IDM a

Software as a Service (SaaS)




• The database is the eTrust

Directory LDAP, a CA

product




• CA has proprietary

connections for UNIX, RACF,

Exchange, and others, as

does Microsoft and Oracle




• Business logic handler

requires Java programming

to assign user attributes when

advanced logic is required




Bottom Line




Microsoft Forefront Identity

Manager requires more

programming skills to configure

than Oracle or CA




Microsoft does not include

governance within their

product




Oracle and CA are easier to

deploy, since they require less

custom programming, plus

they include governance




Have you installed Microsoft

Forefront Identity Manager

(FIM) in your organization?




Please share your thoughts in

the Comments section below




Copyright © InfraMatix

Is Your Company Adequately

Protected from Security Risks?

Download the Free

8 Point Identity Management

Checklist Now at

http://www.IDMChecklist.com


Technology

Comparing forefront identity manager vs. other identity managers