I am currently looking at implementing FIM in an enterprise environment. I am specifically looking at the password management piece. We have numerous mobile users who rarely connect to the corporate network. I am curious what capabilities FIM has for managing passwords and accounts for users who are not connected to the corporate network. For example, I recently read that Hitachi's Password Manager comes with an installer that will launch a GUI to connect to available wi-fi networks and then launch a temp VPN session before the Windows login back to your corporate network. It will then logon with a localadmin account that the password manager software previously created and launch a kiosk mode browser to the self service web portal. At the web portal, the user can answer security questions to reset their network password and unlock their account. Once the network password has been reset, an ActiveX control is launched and updates the locally cached password.
Does FIM have any capability like this? Or would a pre-login VPN and local admin account have to be manually scripted with the credential provider that FIM provides? Any information is appreciated.