none
How we can avoid CALs for FIM 2010? RRS feed

  • Question

  • How we can avoid CALs for FIM 2010 if we don´t use the capabilities provided by the FIM Service and Portal
    Thursday, March 25, 2010 8:29 PM

Answers

  • It's explained in the FIM 2010 FAQ:

    "If you have a Server License, FIM 2010 and ILM 2007 are licensed identically for server software. 

    If you have a Client Access License:

    ·     In ILM 2007, CALs were only required for certificate management. 

    ·     In FIM 2010, CALs are also needed for the new capabilities provided by the FIM Service and Portal."

     

    So, if you're not using the FIM Service and portal, and not using the FIM MA, no need for the CALs.

    When you use FIM, only the FIM Sync service, as you would use ILM 2007, you will need a server license.

     

    HTH,

    Peter


    Peter Geelen - Sr. Consultant IDA (http://www.traxion.com)

    [If a post helps to resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered or Helpful, you help others find the answer faster.]

    Thursday, March 25, 2010 9:45 PM
    Moderator
  • ... our primary goal is the sync and provisioning users, we can use FIM 2010 without CALs?


    You can but you will have to stay with "code" based provisioning and you can't use the "codeless" provisioning that the Portal provides. If you want to create, delete, or move accounts you will have to write code to do so. This code is not hard to write and was done for years by people using the MIIS / ILM products, but for shops that did not have developent staff or didn't want to maintain code it was a big negative.

    If your synchronization needs are anything beyond single attribute to single attribute mapping, you will have to write code as well.

    In addition you will not be able to use the Portal to define automatic group population, another really nice feature of FIM.

    Friday, March 26, 2010 12:24 AM

All replies

  • It's explained in the FIM 2010 FAQ:

    "If you have a Server License, FIM 2010 and ILM 2007 are licensed identically for server software. 

    If you have a Client Access License:

    ·     In ILM 2007, CALs were only required for certificate management. 

    ·     In FIM 2010, CALs are also needed for the new capabilities provided by the FIM Service and Portal."

     

    So, if you're not using the FIM Service and portal, and not using the FIM MA, no need for the CALs.

    When you use FIM, only the FIM Sync service, as you would use ILM 2007, you will need a server license.

     

    HTH,

    Peter


    Peter Geelen - Sr. Consultant IDA (http://www.traxion.com)

    [If a post helps to resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered or Helpful, you help others find the answer faster.]

    Thursday, March 25, 2010 9:45 PM
    Moderator
  • Thanks Peter for the anwser

    So, if the CALs is a Cost issue for us, and our primary goal is the sync and provisioning users, we can use FIM 2010 without CALs?

    Thursday, March 25, 2010 11:20 PM
  • AFAIK, yes.

    Peter

     


    Peter Geelen - Sr. Consultant IDA (http://www.traxion.com)

    [If a post helps to resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered or Helpful, you help others find the answer faster.]
    Thursday, March 25, 2010 11:47 PM
    Moderator
  • Thanks for your valious answer

    Erwin

    Thursday, March 25, 2010 11:55 PM
  • ... our primary goal is the sync and provisioning users, we can use FIM 2010 without CALs?


    You can but you will have to stay with "code" based provisioning and you can't use the "codeless" provisioning that the Portal provides. If you want to create, delete, or move accounts you will have to write code to do so. This code is not hard to write and was done for years by people using the MIIS / ILM products, but for shops that did not have developent staff or didn't want to maintain code it was a big negative.

    If your synchronization needs are anything beyond single attribute to single attribute mapping, you will have to write code as well.

    In addition you will not be able to use the Portal to define automatic group population, another really nice feature of FIM.

    Friday, March 26, 2010 12:24 AM