What is MIM?
Microsoft Identity Manager 2016 (MIM) is an on-premises, server-based synchronization engine. It synchronizes users’ digital identity data between systems.
A History of MIM
MIM used to be called ForeFront Identity Manager 2010 R2 (FIM), and Identity Lifecycle Manager (ILM). Before that, it was Microsoft Identity Integration Server 2003 (MIIS). For a historical comparison see MIM, FIM, and ILM compared. MIM is now in a phase of extended support until Jan 2029.
Note that Microsoft Entra Connect is also based on MIM.
Essentially, MIM synchronizes identity data between various systems
MIM is very flexible in what it can connect to (for example, Active Directory, other directories, HR systems, ERP systems, email systems, etc.) and what objects it synchronizes (always users, often groups, and maybe roles, permissions, computers, etc.)
It can provision and de-provision, enable and disable, move, and synchronize all types of attributes – even passwords (though passwords are not handled like other attributes – being propagated in real–time, while regular attributes are synchronized on a schedule).
It comes with some options:
- A portal that includes a workflow engine for managing employees, contractors, and groups, and for providing self-service password reset. Note the portal functionality is largely replaceable by features in Microsoft Entra ID P1, while the above synchronization capability remains a fundamental requirement to many hybrid implementations and is part of Microsoft Entra ID P1).
- Reporting – though again, there are significant limitations, and third-party alternatives are available, notably from SoftwareIDM.
- Privileged Access Management (PAM) – for use in isolated on-premises AD environments to reduce opportunities for attackers to gain privileged access, by providing just in time and just enough administration.
Resources
We are experts in this complex technology, and we have lots of resources for you. Here are some of the most popular:
Blogs
Webinar recordings:
- How to transition from MIM? Identity experts answer FAQs
- How MIM and Azure AD Connect enable hybrid identity
- MIM and Azure AD Connect – two sides of the same coin?
- Upgrade from ILM or FIM to MIM: Benefits and Best Practices
Need training on Microsoft Identity Manager?
Our industry-leading MIM training courses are available at three levels: Foundation, Advanced and Expert. We have a choice of ways to learn:
- Live instructor-led training via Teams from wherever you are
- Study online at your own pace – start any time
- Arrange private training for your IT team– learning together is a top team-building exercise
MIM Foundation MIM Advanced MIM Expert
Learn how to build an HR-driven provisioning solution for your Active Directory and Microsoft Entra ID Directory with our practical video training.