Forefront Identity Manager (Discontinued) vs. Tivoli Identity Manager

I think that MIM is great for compliance since it reduces the number of logins that are required by users. Most offices have post-it notes with logins floating around because there are so many to remember or there are "shared" logins. This reduces the number of logins to 1 and you can easily revoke access in one fell swoop. This prevents gaps and holes with terminations and updates to select groups are super simple.

It's probably really best suited if you have a business where you have disparate systems but need a way to synchronize the user account information including the passwords between them. If you just have a Windows Active Directory environment only, there probably is no real need for something like this, but if you do this will help manage them easily.

• Authentication
• Security
• Identity Management

• Easily create and manage user accounts from a web interface.
• Intuitive GUI.

• For Windows Server 2008 R2 Servers is a great tool to set a codeless provisioning over new objects.
• Can easily integrate with Active Directory and Exchange Servers, improving the identity sync between the final user and the lifecycle management.
• Improvements in the areas of performance, simplified deployment easing the troubleshooting tasks, better documentation knowledge base, and more language support.
• The codeless provisioning provided in FIM can sustain a variety from high demand to mid-size scenarios for account lifecycle management.

• Sometimes it feels unresponsive and we have to restart the services.

Besides the random issue where it gets unresponsive and we have to restart the services or reboot the server, it's been really solid. I've only had to contact support 1 time in the 15 years I've used it which is saying more than most other software. The cost of maintenance is also very cheap compared to some of the other software we use.

It is Microsoft. We are a Microsoft shop, primarily. It integrates deeply with Active Directory making it good for Microsoft Active Directory shops.

• We see a positive impact simply in the time savings alone. Chasing accounts around is time-consuming and prone to error.
• The cost to us is negligible to the value it provides.

• It has helped us all these years to not have to waste time managing users on multiple systems.
• It controls our password policy for our domain.