Forefront Identity Manager (Discontinued) vs. Microsoft Enterprise Mobility + Security

I think that MIM is great for compliance since it reduces the number of logins that are required by users. Most offices have post-it notes with logins floating around because there are so many to remember or there are "shared" logins. This reduces the number of logins to 1 and you can easily revoke access in one fell swoop. This prevents gaps and holes with terminations and updates to select groups are super simple.

Incentivized

Overall it is well suited to a mid size Enviromint with a limited staff. If you have a limited amount of time you can dedicate to solutions then having one that is by default already included in the system and can be managed well then it makes for fast integration with low overhead

Incentivized

• Authentication
• Security
• Identity Management

Incentivized

• End point managment
• User account security
• Privileged identity management

Incentivized

• For Windows Server 2008 R2 Servers is a great tool to set a codeless provisioning over new objects.
• Can easily integrate with Active Directory and Exchange Servers, improving the identity sync between the final user and the lifecycle management.
• Improvements in the areas of performance, simplified deployment easing the troubleshooting tasks, better documentation knowledge base, and more language support.
• The codeless provisioning provided in FIM can sustain a variety from high demand to mid-size scenarios for account lifecycle management.

Incentivized

• The subscription model (cost) could be revamped for perpetual licensing options

Incentivized

most features are pretty point and click simple. Some areas that are move detailed require some specialized training and knowledge to be able to navigate and get anything useful out of it. With some basic understanding you can gather tremendous amounts of data and have it available

Incentivized

It is Microsoft. We are a Microsoft shop, primarily. It integrates deeply with Active Directory making it good for Microsoft Active Directory shops.

Incentivized

EMS integrates directly with Office 365. It offers multiple desired features in one product/subscription. It's difficult to do a 1:1 comparison between each product. OneLogin's pre-sales support was terrible and implementation was complex. Barracuda offers great email protection but hard to justify the cost when EMS can just be added on to existing Office 365 accounts and brings additional benefit in SSO, etc.

Incentivized

• We see a positive impact simply in the time savings alone. Chasing accounts around is time-consuming and prone to error.
• The cost to us is negligible to the value it provides.

Incentivized

• MFA has prevented a number of phishing attacks against our organization
• Endpoint management has allowed us to use autopilot to set up our devices far faster
• PIM has helped to secure our admin accounts

Incentivized