Hi have a weird issue going on in my FIM 2010 R2 - SP1 lab.  To be honest, I don't really know how long this has been going on.  The workstation I use the most is a Win8 machine (physical), so up until SP1 came out I have not had the SSPR add-in installed and didn't notice any SSPR registration issues for my non-privileged account.  The other workstations are Win7 machines (physical) and I haven't logged on to them in quite some time using my non-privileged account.

Since this is a "lab" environment all FIM functions are installed on the same VM (2008 R2).  Currently, I am only doing DG provisioning to AD (2012) and SSPR - nothing elaborate.

Anyway, my issue is this.  When I logon to my Win8 machine with my non-privileged account the SSPR wizard pops-up in IE as it should the first time.  I hit the Next button and the domain account shown is "DOMAIN\FIM-Admin" and not my domain account (yes I am logged on as my non-privileged domain account).  However, if I logon to the same Win8 machine as any other non-privileged account SSPR work perfectly.

It appears that somehow, FIM thinks my non-privileged account is the FIM-Admin account.  Is it possible that maybe some sort of ObjectID mapping went wrong in FIM ?!?

Check if you have correct SID set on the objects in FIM

bring up task manager and see what IE is running as

This would be a disturbing/perplexing problem to have, as the SSPR Registration pages use only Windows Integrated Authentication initially; i.e., at the initial page where it shows your logon ID and asks for password confirmation, it has not yet connected to the FIM Service and is simply displaying the current user identity.

I deleted my user object in AD and then removed it from FIM.  Created a new user object in AD and pulled it into FIM and happy, happy, joy, joy!

Weird I know, but it is working perfectly.  I must have screwed something up during testing.