Masterclass: Microsoft Identity Manager

This training is intended for system engineers, solution architects, developers and IT staff responsible for managing identities in their corporate environment.

MODULE 1

Module 1: Microsoft Identity Manager Architecture

Detailed discussion about MIM architecture and its components:

1. a) ME Portal
2. b) MIM Service
3. c) MIM Synchronization Service
4. d) MIM Reporting

We will also provide an answer to the question what business needs can be addressed with MIM. Brief presentation of built-in functionality, on which we will expand later in the course, will conclude this module. We will also introduce the concepts of role-based access control and privileged access management.

MODULE 2

Module 2: Deployment

We will discuss various scenarios of MIM deployment and perform detailed analysis of benefits and drawbacks of each solution. We will present how to install Microsoft Identity Manager and execute recommended post installation tasks. Additionally, we will present how to perform capacity planning properly.

MODULE 3

Module 3: MIM Synchronization Service

We introduce you to the Synchronization Service and discuss its features. Students will gain hand on experience with main tools used to design, implement and manage synchronization. We discuss in detail the configuration of Management Agents and explain various task related to schema management. We compare initial loads to schedule runs. The last part of this module will be spent on discussing how to move configurations between test and production environments.

MODULE 4

Module 4: MIM Service Configuration

We will present and discuss MIM Service features. Trainers will also demonstrate the configuration and customization of MIM Portal.

MODULE 5

Module 5: User Management

1. The primary goal of almost all Microsoft Identity Manager installations is user management. We will show to provision accounts through MIM Portal. We will also discuss how to effectively use MIM policies.

MODULE 6

Module 6: Group Management

We will discuss different group types and scopes in both Active Directory and Microsoft Identity Mane er We will show how to create criteria-based groups. To conclude this module, we will discuss the task related to group management.

MODULE 7

Module 7: Role based access control

We w present how to deploy RBAC in your environment, which involves defining roles and control access based upon those roles. We will introduce you to BHOLD Suite including designing and managing attestation process.

MODULE 8

Module 8: Privilege Access Management

a)We  will present how to mitigate risks associated with access escalation. We will discuss and demonstrate how Microsoft Identity Manager reduces threats by working with Active Directory Domain Services to provide a privileged access management interface.

MODULE 9

Module 9: Password Management

We will focus on configuration and deployment of self-service reset password functionality, which allows users to reset their passwords without IT staff help. We will describe how password synchronization works and how we can modify its configuration.

MODULE 10

Module 10: Certificate Management

We will introduce you to the concepts of certificate management. Trainers will demonstrate how to install and configure components required for certificate management. We will look at implementing various scenarios based on certificates including cross forest and ADFS scenarios.

MODULE 11

Module 11: Certificate Management

We will take a deep drive into built-in MIM reporting features. Trainers will discuss how reporting works under the hood and how you can customize and deploy it in your own infrastructure.

MODULE 12

Module 12: Problems?

We will demonstrate the troubleshooting procedures that will help when you end up in

trouble with your MIM installation.

MODULE 13

Module 13: best Practices

After his module day to day operations of Microsoft Identity Manager will not be a mystery for you. We will also discuss very important and often forgotten topic of backup and restore. To conclude our course trainers will present best practices for MIM configuration and management.

Good understanding and hands on experience with Microsoft technologies: Active Directory, SQL Server, Exchange Server, Azure Active Directory.

After finishing the course, you will be granted a CQURE Certificate of Completion. Please note that after completing the course you will also be eligible to claim CPE points!

This is an international Live Virtual Class, which means you will share the learning experience in a group of IT pros from around the world! The class is taught in English by Krystian Zieja – one of CQURE’s core Cybersecurity Experts! Remember that this course is limited to 12 participants total to ensure the highest quality and unique learning experience! During this course you will have an opportunity to interact with the instructor and get Krystian’s help with any problems you might encounter, just as if it was a regular workshop.

Materials:

Author’s unique tools, dozens of exercises, presentation slides with notes.

Platform and Technical Requirements:

To participate in the course you need a Stable internet connection. For the best learning experience we also need you to have a webcam, headphones and a microphone. Open RDP port 3391 for the connection to the Lab environment is needed as well. We will setup a secure Zoom classroom for every day of the course – we will send you a safe link to join the conference by e-mail.