Reader small image

You're reading from  Microsoft Forefront Identity Manager 2010 R2 Handbook

Product typeBook
Published inAug 2012
PublisherPackt
ISBN-139781849685368
Edition1st Edition
Right arrow
Author (1)
Kent Nordstrom
Kent Nordstrom
author image
Kent Nordstrom

Kent Nordström wrote his first lines of code in the late 70s so he's been working with IT for quite some time now. When Microsoft released its Windows 2000 operating system he started a close relationship with them that has continued since. For many years Kent has been working part time as a sub-contractor to Microsoft Consulting Services and has been doing many of the implementations of FIM and its predecessors for multinational companies and large organizations in Sweden. Apart from FIM, Kent is also well known within the community for his knowledge around Forefront TMG, Forefront UAG and PKI. Find out more by visiting his blog on http://konab.com.
Read more about Kent Nordstrom

Right arrow

Self-service using the FIM portal


For users to be able to log in to the FIM portal and authenticate to the FIM Service, we need, as I said before, three attributes populated for the user—AccountName, Domain, and ObjectSID.

But even if we have populated these attributes in FIM Service and a standard user tries to log in to the portal (https://FIMPortal/IdentityManagement) he will get the message shown in the following screenshot:

Why? Well because there is no MPR enabled, by default, to allow users to access the FIM portal and/or FIM Service. The MPRs required allowing access to users is disabled by default. We just need to enable them in order for users to have access.

The MPRs we need to enable are as follows:

  • General: Users can read non-administrative configuration resources

  • User management: Users can read attributes of their own

Also if you look back, you might recall that we had some options during installation talking about user access as well. It was a checkbox with Grant Authenticated...

lock icon
The rest of the page is locked
Previous PageNext Page
You have been reading a chapter from
Microsoft Forefront Identity Manager 2010 R2 Handbook
Published in: Aug 2012Publisher: PacktISBN-13: 9781849685368

Author (1)

author image
Kent Nordstrom

Kent Nordström wrote his first lines of code in the late 70s so he's been working with IT for quite some time now. When Microsoft released its Windows 2000 operating system he started a close relationship with them that has continued since. For many years Kent has been working part time as a sub-contractor to Microsoft Consulting Services and has been doing many of the implementations of FIM and its predecessors for multinational companies and large organizations in Sweden. Apart from FIM, Kent is also well known within the community for his knowledge around Forefront TMG, Forefront UAG and PKI. Find out more by visiting his blog on http://konab.com.
Read more about Kent Nordstrom