Installation Of Microsoft Identity Manager For SharePoint 2016 User Profile Service

Introduction

As we know, the previous version of SharePoint, SP 2010/2013 had a Built-in Forefront Identity Manager (FIM) which ran inside it. We don’t need to install it separately but FIM service is no longer used for User Profile Synchronization in SharePoint Server 2016. In SharePoint 2016, we have only two options.

Active Directory Import (natively Supported) - this is one-way traffic that means you can only import the profiles from the AD into SharePoint. For this, you don’t need to install anything separately, and it is fast.
Use external identity management - you can use Microsoft Identity Manager Server for the Synchronization. You have to install it separately, then connect it to SharePoint User profile.

This article is for the SharePoint IT pros who are responsible for the installation and configuration of SharePoint. This article will guide you through all the steps from downloading to Installation of MIM for User Profile Service.

Before Start

Make sure Server OS should be Windows Server 2008 R2 SP1 and later.
SQL Server 2008 R2 and later for the MIM Sync and MIM Service database
You need the Service account and password under which MIM Sync Service will run.
SQL Server Name and Instance or Alias name
Location of Installation
Download all the required software and patches.

Download the Microsoft Identity Manager from Volume Licensing Site / MSDN or you can download Trial from here.
Also, You need to download the Hotfix and apply in order to properly configured it. You can download it from the following link. KB3092179
Download the SharePoint Management Agent (SPMA)

Installation of Microsoft Identity Manager

During this, we will install the MIM Sync engine for user profile service.

Mount the en_microsoft_identity_manager_2016_x64_dvd_6818274.iso and browse to the Synchronization Service; and click on Synchronization Service.MSI
Click "Next" on the Welcome Screen.
Accept the License Agreement and click Next.
Select Microsoft Identity Manager Synchronization and click Next.
Select the SQL Server location (Remote or Local) and Instance Name ( Default or Named). Click Next
Provide the details of the Service Account under which MIM Sync service will run. Click Next.
Provide the Group name and click Next.
If firewall is enabled on your Server, then enable the rule, otherwise keep it unchecked. Click Next.
Click Install.
Click OK for the warning!
Now, save the Encryption Key and select the location where the key will be saved.
Click Finish.
Click Yes to logoff and re-logon so that the Security Group Membership takes effect.

This will Install the Microsoft Identity Manager Synchronization Module.

Install the Update for MIM Server

Now, we will install the Update for the MIM Server 2016, otherwise the configuration command will not work.

Double click on 488603_intl_x64_zip.exe.
Click Continue.
Select the location where the extracted files will be stored (Select a drive which has at least 250 MB free Space).
Browse to extracted folder and double click on FIMSyncService_x64_KB3092179.msp.
Click Update and wait.
Click Finish.

Installing the Forefront Identity Manager Connector for SharePoint User Profile Store

Now, we will install the SharePoint Management Agent. It should be on the same Server where the MIM is installed.

Double click on the SharepointConnector.msi.
Click Next.
Accept the License Agreement and click Next.
Click Install.
Click Finish.

This will complete the installation of Microsoft Identity Manager for User Profile Service in SharePoint 2016. Next, we have to configure the synchronization for the User Profile Service.

See Also

Please follow the below article for next steps.

Step by Step: Installation of Microsoft Identity Manager for SharePoint 2016 User profile Service-Part-1
Step by Step: Configuration of Microsoft Identity Manager for SharePoint 2016 User Profile-Part -2
SharePoint 2016 User profile Service and MIM: Apply the Connection Filter – Part -3
MIM 2016 with SharePoint 2016 User Profile service: Import Custom Property from Active Directory – Part – 4
MIM with SharePoint Server 2016 User profile: Add more Active Directory Domain for Synchronization. Part - 5

2 Comments

Join the conversation! Your thoughts help the community grow.

Mahmoud Saied8y ago
Thanks for the very good topic. put I have a question, Do we need to install this MIM and SP Connector to all the farm servers or only App Service servers ?
- Waqas Sarwar8y ago
  Only on the server where you want to configure the MIM