Product Overview

Microsoft Forefront Identity Manager 2010 R2 offers an

end-to-end identity management solution with enhanced
security technologies. The solution updates identity
management by providing end users with powerful selfservice capabilities. IT professionals can use it to solve
day-to-day problems such as delegating administration
and creating work flows for common identity
management tasks. Developers can customize and extend
the capabilities of Forefront Identity Manager because the
solution is built on the foundation of Windows Server
2008 R2 and employs the .NET Framework, which
provides a comprehensive and consistent programming
model for building applications.

Licensing Overview
Forefront Identity Manager 2010 R2 is available through
Microsoft Volume Licensing.

Each server on which Forefront Identity Manager

software is installed requires a server license.

Storing Forefront Identity Manager data requires

Windows Server software, Microsoft SQL Server
database management software, and a SQL Server
license. Go to
www.microsoft.com/sqlserver/en/us/get-sqlserver/how-to-buy.aspx for information.

Each user managed by Forefront Identity Manager

requires a Windows Server Client Access License
(CAL). Go to www.microsoft.com/en-us/servercloud/windows-server/2008-r2-buy.aspx for
information.
For each user for whom the Forefront Identity
Manager software issues or manages identity
information, a CAL is required. A CAL is also required
to manage each smart card and to issue and manage
each user's access to a digital certificate.

Each administrator that manages clients by using

Forefront Identity Manager capabilities requires
a CAL.

Purchasing Options
Forefront Identity Manager 2010 R2 is available through
the following licensing programs:

Enterprise Agreement
Enterprise Agreement Subscription
Select
Select Plus
Open
Open Value
Open Value Subscription
Service Provider License Agreement (SPLA)
Campus and School Agreement
U.S. Government
Independent Software Vendor (ISV)

Managing External Users

There are two waysdepending on the relationship to
the external userto issue or manage identities of people
outside the organization.

Each Forefront Identity Manager server accessed by

partners, suppliers, or other unaffiliated external users
requires an External Connector license.

Each affiliated external user requires a CAL. For

example, someone who performs contract work
requires a CAL.

Software Assurance
Forefront Identity Manager customers who purchase
Software Assurance (SA) get 24x7 phone support and
unlimited email support. Go to
http://www.microsoft.com/licensing/softwareassurance/default.aspx for more information.

Customers that have a current SA agreementas well as

server, user, and External Connector licenses for Forefront
Identity Manager 2010are eligible for a complimentary
upgrade to the corresponding licenses for Forefront
Identity Manager 2010 R2 for the duration of their
SA agreement.

Forefront Identity Manager 2010 R2 CALs are

required to use the BHOLD Suite technology.

Customers with active SA on Forefront Identity

Manager 2010 CALs upon availability of Forefront
Identity Manager 2010 R2 will have access to the
BHOLD Suite as well as Forefront Identity Manager
2010 R2. Customers who have purchased Forefront
Identity Manager 2010 without SA will not receive the
BHOLD Suite or Forefront Identity Manager 2010 R2.

Customers who purchase Forefront Identity Manager

2010 R2 without SA will receive the BHOLD Suite.

CAL Licensing Requirements

CALs are not required to synchronize identity information
for users and administrators who are using only the
Forefront Identity Manager synchronization service.
Note: There are no device CALs for Forefront Identity
Manager.

Reporting with System Center

Service Manager

To ensure robust reporting capabilities, Forefront

Identity Manager 2010 R2 includes the use of
Microsoft System Center Service Manager 2010 R2
server software. This software may be used only to
support Forefront Identity Manager data
warehousing needs.

Planning for Forefront Identity Manager

2010 R2
BHOLD Suite
The Microsoft BHOLD Suite augments Forefront Identity
Manager by adding identity and access governance
functionality, including in-depth role management,
separation of duties, access certification, and
authorization management. These capabilities help you
enforce access controls policies.

Forefront Identity Manager 2010 R2 will include the

BHOLD Suite. BHOLD is not sold separately.

Customers who plan to deploy Forefront Identity

Manager 2010 R2either through upgrades or with
a new licenseshould keep in mind the following:

The best way to protect the investment, access new

versions, and get Deployment Planning Services and
technical assistance is to renew an SA agreement.

Flexible payments are available. Go to

www.microsoft.com/financing for information.
Contact a Microsoft Solution Partner directly or call
1-800-936-3500 in the United States and Canada.

This document is provided as-is. Information and views expressed in this document, including URL and other Internet Web site references,
may change without notice. This document does not provide you with any legal rights to any intellectual property in any Microsoft product.