Microsoft Identity Manager 2016 licensing and downloads
This article outlines the approaches for licensing Microsoft Identity Manager (MIM) 2016, with pointers on where to download the software.
Licensing MIM for your organization
Microsoft Identity Manager 2016 is licensed on a per-user basis. The details on licensing are included in the Product Terms and related documents, which can be downloaded from the licensing terms page.
Licensing for Azure AD Premium customers
Microsoft Identity Manager 2016 is included with Azure Active Directory Premium (P1 and P2), which is part of Enterprise Mobility + Security.
Azure AD Premium is available through a Microsoft Enterprise Agreement, the Open Volume License Program, and the Cloud Solution Providers program. Azure and Microsoft 365 subscribers can also buy Azure Active Directory Premium P1 and P2 online. Read more at Azure Active Directory pricing.
If you do not have Azure Active Directory Premium subscriptions for your users, and are using more MIM capabilities beyond synchronization, then a Client Access License (CAL) is required for each user whose identity is managed in MIM. If you want external users—such as business partners, external contractors, or customers—to be able to access MIM, you can acquire CALs for each of your external users, or acquire External Connector (EC) licenses. Microsoft Identity Manager 2016 CALs are not required for users whose identity is only in the Microsoft Identity Manager synchronization service and is not managed in any other MIM component.
Licenses for platform components
A Windows Server license is required to use Microsoft Identity Manager 2016’s server software as a Windows Server add-on. And a MIM deployment also requires a SQL Server installation. Windows Server and SQL Server licenses are not included with MIM.
Obtaining MIM software
Before starting a new install of MIM or an upgrade from an earlier version, ensure you have the latest versions.
If you are starting a fresh install, you will need to download the installation files for each MIM component that is relevant to your scenario. Then, download any updates for those files, and then download any additional components that are separate downloads from the Download Center.
|Scenario||Component||Required for scenario?||DVD ISO folder name||Comments|
|Synchronization||Sync Service (including connector to AD)||Yes||
||To be installed on domain controllers|
|Synchronization||Connectors for LDAP, SQL, Web Services, PowerShell, Lotus Domino, Graph||No||N/A||Distributed via Download Center|
|Privileged Access Management||MIM Service||Yes||
|Self-service||MIM Service, MIM Portal||Yes||
|Self-service||Add-ins and extensions||No||
||To be installed on end-user PCs|
|Self-service||Hybrid reporting agent||No||N/A||Distributed via Download Center|
|Certificate Management||CM Bulk Client||No||
|Certificate Management||CM Client||No||
|Certificate Management||CM App for Windows||No||
Obtaining Windows installer packages
For a new installation, most organizations with Volume License agreements download the MIM installation packages from the Volume Licensing Service Center. The DVD ISO file contains one folder for each MIM component:
Service and Portal, etc. If you are going to install the software on a different computer from which you downloaded it, be sure to copy either the entire ISO file or the folder for the component: do not merely copy just an MSI file out of a folder without the rest of the files and sub-folders.
If you do not have access to the Volume Licensing Service Center and have a subscription for Azure AD Premium P1 or P2, you can download the Azure AD Premium edition of MIM 2016. This edition includes the
Synchronization Service and
Service and Portal components of MIM 2016 SP2. All the changes from published hotfixes as of March 2021 are included in the installers. The MIM Service installer for the Azure AD Premium edition, in order to validate your subscription, requires internet connectivity and will ask you to provide Azure AD credentials with enough permissions to read subscribedSKUs.
If you do not have access to the Volume Licensing Service Center, customers with an appropriate developer subscription can also download MIM 2016 SP2 as an ISO file from Visual Studio My Benefits Downloads. Search for "Microsoft Identity Manager 2016 with Service pack 2".
After installing MIM from an MSI file, you should next install the necessary hotfixes.
Check the Identity Manager version release history for the most recent update release, which has a link to the download site for the installer patch files.
To determine which update files are necessary, this table lists the components and the name of the corresponding patch (MSP) file in an update.
|Scenario||Component||DVD ISO folder name||Corresponding update patch file name|
|Self-service||MIM Service, MIM Portal||
|Self-service||Add-ins and extensions||
|Access management (BHOLD)||BHOLD||
|Certificate Management||CM Bulk Client||
|Certificate Management||CM Client||
Be sure to read any release notes associated with the update prior to installing the MSP file.
Updates to BHOLD are not distributed as MSP files, only as MSI installers.
The following downloads may also be relevant:
Generic LDAP Connector, Generic SQL Connector, Graph Connector, Lotus Domino Connector, PowerShell Connector, Web Services Connector
- Learn more on scenarios delivered in Microsoft Identity Manager 2016.
- Read the capacity planning guide.
- Deploy MIM for a synchronization scenario.
Submit and view feedback for