Hi. We have ILM 2007 in production and going to replace it with FIM 2010. We want to install FIM within the same domain as ILM 2007 and first utilise the new features like password reset portal. Then gradually move functionality from ILM 2007 to FIM 2010 and decommission ILM 2007. So my questions are is this configuration supported and are there any known issues if both systems run parallel? Tks in advance.

Nothing from a technical pov is going to stop you installing FIM into the same domain as ILM. The main things you'll have to be careful about are your metaverses being out of sync (particulary if you're doing provisioning on one system and password operations on the other) and being really careful about which system is allowed to change data. There is another way you could proceed. You could upgrade ILM 2007 to FIM 2010 Sync Service by using your existing database and recompiling your dlls with the new library. It depends on whether you're seeing this as a good opportunity for a complete redesign, or whether you'd like to build on what you already have.http://www.wapshere.com/missmiis

We prefer to do a clean build then gradually move features from ILM to FIM. What are the agents that I have to create in FIM and there settings for the password reset portal to work? But provisioning will be handled by ILM 2007

Say you just have a single AD, and all you want to have to start with is the password reset functionality, then I should think all you'd need is one AD MA and the FIM MA. Allow ILM to populate AD. The AD MA in the FIM sync service would just be reading the user objects it finds there. You should then be able to follow the standard instructions for enabling password reset. http://technet.microsoft.com/en-us/library/ee534892(WS.10).aspx If you also have PCNS and password sync then it should be ok to leave that running with ILM to start with. When the person resets their password, via FIM, in AD, PCNS will pick it up as any normal password change and send it on to ILM.http://www.wapshere.com/missmiis