Forefront Identity Manager (Discontinued) vs. NetIQ Identity Manager

I think that MIM is great for compliance since it reduces the number of logins that are required by users. Most offices have post-it notes with logins floating around because there are so many to remember or there are "shared" logins. This reduces the number of logins to 1 and you can easily revoke access in one fell swoop. This prevents gaps and holes with terminations and updates to select groups are super simple.

• An organization who needs a way of managing their entire user lifecycle.
• If an organization needed a solid Identity Management (IDM) solution that could do Single Sign-On (SS) and provisioning for services both internally and in the cloud.

• Authentication
• Security
• Identity Management

• Easy to use workflow for creating users.
• The self-service portal for resetting passwords etc., is easy to deploy.
• Has strong user activity monitoring.

• For Windows Server 2008 R2 Servers is a great tool to set a codeless provisioning over new objects.
• Can easily integrate with Active Directory and Exchange Servers, improving the identity sync between the final user and the lifecycle management.
• Improvements in the areas of performance, simplified deployment easing the troubleshooting tasks, better documentation knowledge base, and more language support.
• The codeless provisioning provided in FIM can sustain a variety from high demand to mid-size scenarios for account lifecycle management.

• The interface is a bit outdated.
• It would be nice to be able to customize the self-service portal more.
• It would be great if it integrated with more products.

It is Microsoft. We are a Microsoft shop, primarily. It integrates deeply with Active Directory making it good for Microsoft Active Directory shops.

• We see a positive impact simply in the time savings alone. Chasing accounts around is time-consuming and prone to error.
• The cost to us is negligible to the value it provides.

• ROI
• Self-Service
• Easy Install