locked
As per my scenario , how to license MS FIM 2010 ? RRS feed

  • Question

  •  

    I am currently using MIIS 2003 (Feature Pack) for synchronization of AD users from Active Directory (Windows 2003 AD) into an ADAM instance. This ADAM instance is the authentication backend for a business app being developed.

    Password Change Notification Service of MIIS 2003 (Feature Pack) is running on all domain controllers and all password changes are being sent to the ADAM instance without any problem.

     

    Provisioning of the user accounts has been achieved with the help of Microsoft Provisioning Assistant which generated the DLL extension for us without any need for writing code.

     

    Now that the new business app is closed to being finished, I am currently considering the purchase of MS FIM for our production environment. In regards to the CALs for FIM 2010, Microsoft states:

     

    “CALs are not required to synchronize identity information for users and administrators who are using only the FIM synchronization service.”

     

    What is the real meaning of this statement? Does it apply to our case?

     

    Which components of FIM should I deploy for this basic scenario?

     

    I am currenlty in the process of deploying a proof of concept environment with MS FIM 2010.

     

    Any help will be highly appreciated. Thanks,

     

    Ulises Cartelle

    Miami, FL

     

    Thursday, August 5, 2010 8:36 PM

Answers

  • The CALs pertain to the FIM Service, FIM Portal and FIM Certificate Management.

    If you are only using the FIM Sync Engine then you pay no CALs.

    As soon as you install the FIM MA and export objects to the FIM Service then CALs are required.  Or if you start using FIM Certificate Management, then CALs apply.

    AFAIK there is no free-ish version of FIM to replace IIFP.


    CraigMartin – Edgile, Inc. – http://identitytrench.com
    Friday, August 6, 2010 12:10 AM

All replies

  • The CALs pertain to the FIM Service, FIM Portal and FIM Certificate Management.

    If you are only using the FIM Sync Engine then you pay no CALs.

    As soon as you install the FIM MA and export objects to the FIM Service then CALs are required.  Or if you start using FIM Certificate Management, then CALs apply.

    AFAIK there is no free-ish version of FIM to replace IIFP.


    CraigMartin – Edgile, Inc. – http://identitytrench.com
    Friday, August 6, 2010 12:10 AM
  • Is it possible to create MPRs, SRs, Workflows and Sets programatically via the WS interface in order to avoid Portal CALs?
    Thursday, October 14, 2010 12:05 AM
  • No, the use if FIM Service and Portal, also through the WS interfaces, requires CAL's  for users that are being managed with FIM.

    Brjann


    This posting is provided "AS IS" with no warranties, and confers no rights
    Thursday, October 14, 2010 4:37 PM
  • just to be sure I understand this...
     
    fiction company:
    * 1000 users
    * 10 of those are admins (990 regular users)
     
    Scenario A:
    FIM SVC DB contains 1000 person objects
    All 1000 person objects can logon to the portal and are being managed in some way
    HOW MANY CALs are needed? (a) 1000, (b) 990, (c) 10
     
    Scenario B:
    FIM SVC DB contains 1000 person objects
    Only the 10 admin can logon to the FIM Portal to manage the other 990 person objects. The 990 person objects CANNOT logon to the portal
    HOW MANY CALs are needed for the FIM Portal? (a) 1000, (b) 990, (c) 10
     
     

    Cheers,
    (HOPEFULLY THIS INFORMATION HELPS YOU!)

    # Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

    BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
    BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
    ------------------------------------------------------------------------------------------------------
    * This posting is provided "AS IS" with no warranties and confers no rights!
    * Always test ANY suggestion in a test environment before implementing!
    ------------------------------------------------------------------------------------------------------
    #################################################
    #################################################
    ------------------------------------------------------------------------------------------------------
    "Brjann Brekkan" wrote in message news:8227efc1-1672-49ff-ba12-60107960f9a0...

    No, the use if FIM Service and Portal, also through the WS interfaces, requires CAL's  for users that are being managed with FIM.

    Brjann


    This posting is provided "AS IS" with no warranties, and confers no rights

    Jorge de Almeida Pinto [MVP-DS] (http://blogs.dirteam.com/blogs/jorge/default.aspx)
    Monday, November 1, 2010 7:20 PM
  • From the FIM FAQ (http://www.microsoft.com/forefront/identitymanager/en/us/faq.aspx

    Q.  How will Forefront Identity Manager 2010 be licensed?

    A.  

    It depends on the type of license:

    Server License -- All instances of the server software require a FIM 2010 server license. 

    Client Access License -- You need a Client Access License for:

    • Each user whose identity or certificate is managed by FIM 2010.

    • Each user who accesses the FIM 2010 software.

    • External users. For external users, either CALs can be purchased or they can be covered by an External Connector license, depending on which solution makes better financial sense. 


      So the answers are:

    • Scenario A: (a) 1000
    • Scenario B: (a) 1000

    Let's add an other scenario:

    Scenario C:
    FIM SVC DB contains 1000 person objects
    Only the 10 admin can logon to the FIM Portal to manage the other 990 person objects. The 990 person objects can logon to the portal but are external to the company
    HOW MANY CALs are needed? (a) 1000, (b) 990, (c) 10 , (d) 10 + external connector
    • (d): 10 + External Connector OR (a) 1000 (whichever is financially the best)

    I hope the answer to scenario B is wrong, but i'm afraid it's not


    http://setspn.blogspot.com
    Tuesday, November 2, 2010 6:29 AM