Question:

Is it possible for Microsoft Forefront Identity Manager 2010 RC1 to synchronize identities with Active Directory?

Answer:

FIM 2010 RC1 uses Management Agents (MAs) to facilitate the synchronization process. These MAs allow for the connection and flow of identity information between FIM and other identity sources, such as AD. The synchronization service includes a meta-directory and a provisioning engine, which work together to ensure that changes in the identity store are accurately reflected across the connected systems.

The synchronization is state-based, meaning FIM infers changes based on previously stored data and updates accordingly. This is particularly useful for username and password synchronization, providing users with a single set of credentials across multiple systems. It simplifies the management of identities and credentials, making it easier for users to access various services and for administrators to manage accounts efficiently.

Moreover, FIM 2010 RC1’s synchronization capabilities are not limited to AD. It can also synchronize with other systems like Siebel and PeopleSoft, importing changes on a ‘delta’ basis—only what’s changed from the primary source is imported. This reduces the overhead and improves the efficiency of the synchronization process.

In summary, FIM 2010 RC1’s ability to synchronize with AD is a powerful feature that helps organizations manage their identities more effectively, ensuring that their directory environments are up-to-date and secure.