FIM 2010 Self-Service Password Reset Now Supports All Domain Password Policies

I am excited to announce that FIM 2010 Self-Service Password Reset now supports all domain password policies.  It was a joint effort between the Windows Active Directory and FIM development teams to provide this new functionality. Details of this change can be found in


Troubleshooting FIMService / FIMPortal / Password Reset Client

FIM is a complex product. Once a while, I find myself just clueless why something does not work. I have the advantage of having access to the source code and be able to debug. Attaching a debugger isn’t a 5-second task and very often the answer is actually in the log. In this blog post,…


How Does Lockout Gate Work

I am back! I haven’t forgotten you all. I was just busying with RTM Update 1 which is now live on Microsoft Update. In Forefront Identity Manager – Credential Management, Part 2, i talked about what Lockout Gate is capable of doing and in the Password Reset Deployment Guide, it mentions if you put the…


Call for Topics

Is there anything in particular that you want to know more? Leave me a message 😛


Self-Service Password Reset to Non-Active Directory System

Background: I often come across two types of questions in both internal and external channels How can I leverage SSPR and reset a password for a non-AD account (e.g. MSSQL, HR or .NET Passport)? How can I implement password filters but do so in FIM instead of AD? For #1, PCNS together with FIM Synchronization…