Microsoft Identity and Access Management Series

Overview.doc

The overview describes the series, how it is structured and provides information about the following:

• How to access the Tools and Templates
• Style conventions in the papers
• Consulting services and system integrators
• Independent hardware and software vendors

Fundamental Concepts.doc

This paper describes key concepts, terminology, and technologies for identity and access management. It includes common business, technology, and security challenges and approaches for overcoming these challenges.

Platform and Infrastructure.doc

This paper describes the common platform requirements and technology infrastructure for identity and access management solutions.

Identity Aggregation and Synchronization.doc

This paper describes the approaches and technologies available for integrating identity stores across a heterogeneous environment. It also provides implementation guidance for identity aggregation and synchronization between Microsoft Active Directory forests, Sun ONE Directory Server 5.1 (formerly iPlanet Directory Server), and Lotus Notes with Microsoft Identity Integration Server 2003, Enterprise Edition (MIIS 2003) with Service Pack 1 (SP1).

Password Management.doc

This paper describes the approaches and technologies available for managing passwords and enforcing strong password policy. The paper includes step-by-step implementation guidance for:

• Managing intranet passwords
• Managing extranet passwords
• Enforcing strong password policy

Provisioning and Workflow.doc

This paper discusses how to automatically provision identities into multiple directories and identity stores in a heterogeneous environment. It also discusses managing security and e-mail group memberships, and describes a workflow process that can extend automated processes. You can use the information in this paper to enable the automated administration of user identities and reduce costs while you increase the availability and security of information resources. This paper also provides detailed configuration tasks that you can use to achieve these results by using MIIS 2003 with SP1.

Intranet Access Management.doc

This paper describes the approaches available for intranet single sign on (SSO), access management, and platform and application integration. It also provides implementation guidance for:

• Integrating UNIX workstations with Active Directory.
• Integrating SAP R/3 Application Server authentication using the Kerberos version 5 authentication protocol.

Extranet Access Management.doc

This paper describes the approaches available for extranet SSO, access management, and providing business-to-consumer (B2C), business-to-business (B2B), and business-to-employee (B2E) services. It also provides implementation guidance for:

• B2E extranet Web access and SSO using X.509 certificates.
• B2C extranet Web access and SSO using Microsoft Passport.

Developing Identity-Aware ASP.NET Applications.doc

This paper discusses how to develop ASP.NET multi-tier extranet and intranet Web applications in Microsoft Visual C# and Microsoft Visual Basic .NET that are integrated with Microsoft Windows Server 2003 directory and security services. It also provides detailed implementation guidance and ASP.NET code samples (in C# and VB.NET) for:

• Intranet Web applications that use Windows-integrated authentication and Windows Authorization Manager.
• Extranet Web applications for B2B, B2C, and B2E scenarios using Windows authentication (including Forms-based authentication, X.509 certificates, and Microsoft Passport) and Windows Authorization Manager.

Identity and Access Management Tools and Templates.msi

Several code samples and configuration files accompany each paper in the Identity and Access Management Tools and Templates.msi file that is part of this download.

• Click the Download button at the top of the page to start the download.
• Do one of the following:
• To start the .zip file extraction immediately, click Open or Run this program from its current location. Then extract the files to your preferred location on your computer.
• To save the download to your preferred location on your computer for .zip file extraction at a later time, click Save or Save this program to disk.

• To install the .msi package:
1. Navigate to where you extracted the .zip file content on your hard drive.
2. Double-click the Identity and Access Management Tools and Templates.msi file.
3. Accept the Microsoft Software License Terms.
4. Follow the steps in the installation dialog to complete the installation.
5. Find the installed files in your My Documents folder or by looking in the Start/All Programs menu for a shortcut.

Note In version 1.4, the default install path for the Tools and Templates is %UserProfile%\My Documents\Identity and Access Management Tools and Templates. If you have a long user or domain name, you may receive an error message when installing the Tools and Templates. If you do see an error, shorten the length of the installation path, for example, to %UserProfile%\My Documents\IdM.

Solution Accelerators are free, scenario-based guides and automations designed to help IT Professionals who are proactively planning, deploying, and operating IT systems using Microsoft products and technologies. Solution Accelerator scenarios focus on security and compliance, management and infrastructure, and communication and collaboration.

More Information about the Solution Accelerator Notifications Newsletter

Solution Accelerators are free, scenario-based guides and automations designed to help IT Professionals who are proactively planning, deploying, and operating IT systems using Microsoft products and technologies. Solution Accelerator scenarios focus on security and compliance, management and infrastructure, and communication and collaboration.

Get the Solution Accelerator Notifications Newsletter

Subscribe to the Solution Accelerator Notifications newsletter so that you can stay informed about new Solution Accelerator releases and updates. The newsletter covers such areas of interest as

• Communication & Collaboration
• Security, Data Protection, & Recovery
• Deployment
• Operations & Management

You may also receive invitations to participate in accelerator development via beta programs and customer surveys. Solution Accelerator Notifications is currently available in English only.


If you’ve used a Solution Accelerator within your organization, please share your experience with us by completing this short survey (less than ten minutes long).