Microsoft Identity Manager (formerly Forefront) helps you manage the users, credentials, policies, and access within your organization. Additionally, MIM 2016 adds a hybrid experience, privileged access management capabilities, and support for new platforms.

Cloud-ready identities
Automatically prepare Active Directory identities for synchronisation with Azure Active Directory.

Powerful self-service
Password reset with Azure Multi-Factor Authentication, dynamic groups with approvals and redesigned certificate management.

Enhanced security
Hybrid reporting and privileged access management to protect admin accounts, and support for new security protocols.

Benefits of MIM:

1. Common identity
   Simplify identity lifecycle management with automated workflows, business rules and easy integration with heterogeneous platforms across the datacentre and cloud. Automate identity and group provisioning based on business policy and implement workflow-driven provisioning through a single interface. Extend Microsoft Identity Manager to support new scenarios through the Visual Studio and .NET development environments.
2. Protect data
   Discover and map permissions across multiple systems to individual, assignable roles. Use role mining tools to discover permission sets for users across the enterprise to be later modeled and applied centrally. Increase visibility into compliance and the security state of systems across the organisation with in-depth auditing and reporting.
3. Enable users
   Allow users to self-remediate identity issues, including group membership, smart card and password reset functions. An easy-to-use interface delivers increased productivity and satisfaction.
4. Unify access
   Reduce the number of usernames and passwords needed to login. Ensure admin accounts are only going where they need to go and doing what they need to do. Groups can automatically update their membership to ensure only the right people have access to your resources.