Complementing Forefront Identity Manager
For Simplified Identity and Access Management

FIM delivers high value for comprehensive identity and access management (IAM) that touches every part of the enterprise. However, like any other IAM framework, there are areas where FIM can be enhanced, and deployments and time-to-value can be accelerated with targeted third-party solutions.

The Quest One Identity Solution leverages an existing investment in infrastructure (specifically Active Directory) to make IAM more efficient, more secure, and more compliant. For an organization with FIM, this means increased functionality, expanded scope for Active Directory, and targeted optimization to make FIM more powerful, more quickly deployed, and more easily managed.

Building IAM around FIM

With FIM at the center of IAM, the Quest One Identity Solution provides targeted functionality, optimized to create a comprehensive solution with the flexibility to precisely address the objectives of any organization.

Strong Authentication
• Implement one-time password (OTP) authentication based on Active Directory identity and managed through standard Active Directory tools
• Extend Windows smart cards or OTP to Unix, Linux, Mac, and Java systems for unified, cross-platform strong authentication
• Launch enterprise single sign-on through any strong authentication source

Single Sign-on
• Empower Unix, Linux, Mac, Java, and many applications to participate as “full citizens” in Active Directory’s Kerberos single sign-on environment
• Deliver Extend Windows smart cards or OTP to Unix, Linux, Mac, and Java systems for unified, cross-platform strong authentication

Deployment
• Make Unix, Linux, Java, and Mac systems "full citizens" in Active Directory, eliminating the need for custom FIM connectors for these systems
• Integrate a high number of non-Windows systems, platforms, and applications with Active Directory
• Reduce costs and accelerate FIM deployments by eliminating much of the custom integration work required of non-Windows systems

Administration and Operation
• Leverage PowerShell for simplified FIM task execution across multiple Microsoft platforms
• Extend the scope of Windows Group Policy to include Unix, Linux, Mac, and many applications
• Unify management around the proven tools already in place
• Centralize auditing and reporting across the heterogeneous environment

Active Directory Security and Protection
• Lock down Active Directory security assignments
• Control and document Active Directory permissions
• Optimize compliance for Active Directory and any non-Windows system that has “joined” Active Directory through Quest One