Identity Lifecycle Manager 2007 (ILM 2007) Technical Library
Identity Lifecycle Manager (ILM) 2007 enables IT organizations to reduce the cost of managing the identity and access lifecycle by providing a single view of a user's identity across the heterogeneous enterprise and through the automation of common tasks. ILM 2007 builds on the metadirectory and user provisioning capabilities in Microsoft Identity Integration Server 2003 (MIIS 2003) and adds new capabilities for managing strong credentials such as smartcards with Certificate Lifecycle Manager 2007 (CLM 2007). ILM 2007 provides an integrated approach that pulls together metadirectory, certificate and password management, and user provisioning across Windows® and other enterprise systems.
ILM 2007 has two central components, one that includes metadirectory and user provisioning capabilities and another for certificate and smart card management.
Identity Synchronization and User Provisioning with MIIS 2003
The identity synchronization and user provisioning component of ILM 2007 manages identity information across multiple stores by aggregating this information in a central repository called the metaverse. Management agents serve as connectors that translate data from these connected stores to the metaverse. For example, the e-mail system can be linked to its HR database through the metaverse. When an employee joining the organization is added to the HR database, ILM 2007 can automatically provision that employee to the e-mail system. Each employee's attributes, from the e-mail system and the HR database, are imported into the connector space through management agents.
Certificate and Smart Card Management with CLM 2007
ILM 2007 also provides sophisticated credential management features to Windows Server 2003 certification authorities (CAs) by acting as an administrative proxy. Once installed within an organization, all digital certificate and smartcard management functions pass through ILM 2007. The certificate management solution in ILM 2007 consists of three components.