Microsoft Forefront Identity Manager offers a comprehensive solution for managing identities, credentials, and identity-based access policies across heterogeneous environments. Users can create their own security and email distribution groups and decide who to include in those groups. They can reset their passwords without calling their help desk. IT Pros can use FIM to manage certificates and smart cards. FIM embeds self-help tools in Outlook so users can manage routine aspects of identity and access. FIM also gives IT professionals rich administrative tools and enhanced automation, and delivers .NET and Web Services based extensibility for developers.