We have an environment where the Active Directory server is "far-away" from some client applications in the network. Each authentication request from these applications to AD requires about 2 seconds to get a response. Would deploying FIM 2010 into this environment help with the slow authentication requests if we point the client to the local FIM 2010 server instead of the "far-away" AD server? In particular, we want to know if FIM 2010 can locally store everything that is required to respond to authentication (including users' passwords). We are concerned that maybe FIM 2010 does not locally store the users' passwords, and then FIM 2010 has to communicate with the "far-away" AD server for each authentication request.

With the possible exception of the password reset ability, FIM 2010 is not involved in the logon/authetication process in any way, shape, or form, so the answer to your question is no. If you want to reduce authentication lag times either increase the speed/size of the pipe, or locate a domain controller closer. Paul Adare CTO IdentIT Inc. ILM MVP