Link to home
Start Free TrialLog in
Avatar of GCIT_Manager
GCIT_Manager

asked on

BizTalk vs ILM (Identity Lifecycle Manager) ??

Hello,

As the AD 2003 and Exchange 2003/2007 Administrator I am in charge of our new ILM server that we are building. However I have learned that our Programmers recently installed a BizTalk server. If anyone can help me learn the specific differences it would be greatly appreciated. Here's our needs:

Automate the creation, modification and deletion of AD accounts, Mailboxes, group membership, AD attributes, Home Directory folders (creation and permission modification) based on data that is in our Registrar's database (MS SQL 2000 and 2005). This also applies to changing SQL code based on other things changing (which would affect our programs which have SQL on the backend).

Account username and password synchronization - Single sign-on so that passwords for various apps are changed if you change it in another location.

Integrate custom scripts (VBS, Powershell, VB.NET, C++) if we want to add these.

I learned that they understand Biztalk to be able to do all this and yet while I'm reading about ILM i see that they're touting it as the product to use for this as well.

If anyone could help explain the differences between the two products, give advice about which to use, and point towards a resource that helps explain this I would greatly appreciate it.

Regards,

Blake
ASKER CERTIFIED SOLUTION
Avatar of Michael Worsham
Michael Worsham
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of GCIT_Manager
GCIT_Manager

ASKER

Thanks for the reply. Actually it's funny you should link that other thread because that's one I created last november and never heard back from the person after the initial reply.

Basically as an educational institution we have a best of breed situation with various SQL based applications (HR, Student Registrar, Finance, etc) and their goal with biztalk is to create work flows as you describe them so that as a process starts it can trigger updates and changes within other applications that don't natively talk to each other. They have already purchased it and there's no going back from that perspective.

What has thrown me for a loop is that on my side (AD/Exchange & SQL) we have ILM which can also synchronize data between two directories (like AD/Exchange and SQL) so my original hope was that based on HR and Registrar data it would trigger syncs over to AD/Exchange and in addition we could automate the things described in my original post.

The funny thing is that we have both at our disposal (lovely Campus Agreement pricing made this possible) and both aren't leaving. But I'm trying to nail down which is best to use for the pieces I described above. They're already going to use BizTalk for the workflow between all those other pieces and I'll be using ILM for our MIcrosoft Live @ Edu implementation so now it's us trying to figure out which to use for the pieces described in first post.

Thanks again.
I don't know if BizTalk can do AD/Exchange & SQL replication -- honestly never tried. In my past life as a BizTalk Architect, I utilized BizTalk to move an entire Oracle database to MS SQL, aligning up the schemas and migrating over the stored procedures and data from one platform to the next.

One thing you might want to try to see what BizTalk is capable of is to download from the Microsoft site a BizTalk Demo in VHD format and install it upon Microsoft Virtual Server 2005 build. In the demo, it has a number of examples on what you can do with the platform to see if its a fit for your environment, etc.

Microsoft BizTalk 2006 VHD
http://thesource.ofallevil.com/downloads/details.aspx?FamilyID=bcae4531-6689-4016-89da-ffe60d061cef&DisplayLang=en
yeah I was looking at their virtual labs and it doesn't seem to mention anything. Even searching biztalk + exchange in google groups doesn't bring up much in the last 2 versions of exchange. I'm beginning to think I should tell them that for doing process workflow between systems (outside of AD/Exchange) they should use biztalk but to let us use ILM for the account provisioning and management. I just have to see if ILM can watch for fields in SQL and then make/modify/delete AD/Exchange accounts based on that data.

Also do you know if BizTalk is good for password synchronization or is that an ILM part?

Thanks,

Blake
ILM would be best for that. BizTalk I know needs the SSO (Single Sign-On) portion to work [to login to SQL servers, etc], and if ILM handles that part as well -- then you pretty much got that part covered.
I'm not sure if this conclusion is definitive, but it's close enough for me to give you the credit. Thanks for the advice.