Virtual Identity Server for Enterprise Group Mangement™
Reducing Large Active Directory Group Population Processing Times from Hours to Seconds

Most organizations have pre-defined Active Directory security groups deployed within an Active Directory environment. These groups govern access and security rights to applications, network shares and documents on the network.

The challenge is not in deciding who should initially be in these groups. Instead, it is the up-keep and maintenance of the group membership over time. Now, using Optimal IdM’s Virtual Identity Server for Enterprise Group Management (VIS for EGM™), organizations can quickly and easily deploy a solution to manage group membership in Active Directory groups.

VIS for EGM seamlessly integrates with Microsoft’s Identity Lifecycle Manager (ILM) via a management agent to provide robust group management capabilities. Organizations that do not have ILM can still leverage VIS for EGM by utilizing the standalone windows service that ships with the product.

VIS for EGM enhances the ILM deployment further by eliminating the need to have groups projected into the metaverse, reducing managed objects and reducing processing time. Group administrators provide the criteria for membership within a group that will be managed by VIS for EGM. The management agent or windows service then adds or removes users to the group automatically without the need for custom coding. Group or system administrators can even be e-mailed a report of the changes made.

Virtual Identity Server for Enterprise Group Management

• Provides a codeless solution to add or to remove users from Active Directory groups automatically.



• Membership to the existing Active Directory group(s) is defined based on attributes on a user.



• As user attributes change over the lifecycle of the user, EGM automatically manages group membership in near real-time; adding to or removing users from the Active Directory groups.



• VIS for EGM can be configured to email group or system administrators with a report of the users that were added or removed.



• VIS for EGM ships with a management agent (MA) for Identity Life Cycle Manager / Microsoft Identity Integration Server ( ILM /MIIS). This management agent supports full import & synchronization, delta import & synchronization as well as export run profiles.

Key Benefits

• Provides an easy, codeless mechanism to manage group membership across multiple Active Directory Forests.



• Compliance and regulatory needs are met by automatically adding and removing users from groups in near real-time.



• A full audit report details what changes were made and when. The report is emailed to a pre-configured group of users or alias.



• Significantly reduces complexity of an ILM deployment by reducing the number of metaverse objects that need to be imported and managed.



• Provides a codeless solution for group population that leverages and extends upon the existing investment in Microsoft environment.



• Reduces the number of replicated objects within an environment.



• Achieve immediate and instant payback. VIS for EGM deploys in hours not weeks or months, saving both time and money.



• Seamless integration within a Microsoft environment. VIS for EGM is available integrated with ILM as a management agent, or can be run standalone as a windows service.



• Extends ILM by enabling the user attribute “memberOf” to be read/writeable within the metaverse.

Identity Lifecycle Manager Integration and Enhancements

• VIS for EGM enables the “memberOf” user attribute to be read and write capable within the ILM metaverse.



• VIS for EGM eliminates the need to import group objects into the metaverse to perform group populations.



• VIS for EGM simplifies an ILM deployment by reducing the number of metaverse objects that need to be imported and managed.

Download VIS for Enterprise Group Management DataSheet

  Download VIS for Enterprise Group Management DataSheet(pdf)