Support-Tip: (PAM) MIM PAM SAMPLE Portal | HTTP Error 500.19 - Internal Server Error

PROBLEM SCENARIO DESCRIPTION:

When creating the site with one of the following commands below fail when copying over sample portal :

New-WebSite -Name "MIM Privileged Access Management Example Portal" -Port 8090 -PhysicalPath "C:\\Program Files\\Microsoft Forefront Identity Manager\\2010\\Privileged Access Management Portal\\"

New-Item "IIS:\Sites\MIM Privileged Access Management Example Portal" -physicalPath "C:\\Program Files\\Microsoft Forefront Identity Manager\\2010\\Privileged Access Management Portal\\" -bindings @{protocol="http";bindingInformation=":8090:"}

NOTE	Technical Guide to Install and configure: https://technet.microsoft.com/enus/library/mt488767.aspx

 

Sample PAM App:

https://github.com/Azure/identity-management-samples

When created you attempt to navigate and you get the following screen below

PROBLEM RESOLUTION:

Create the website VIA the IIS MMC as at this point it is unclear the issue from the command-line

Step 1 : Create the application pool

New-WebAppPool "MIMPAMEP"

Step 2: Create Empty Folder (C:\Program Files\Microsoft Forefront Identity Manager\2010\Privileged Access Management Portal)

Step 3: Create the site with IIS MMC

• Select the Sites container --> Right Click --> select Add WebSite…

• Next you will need to fill in all the appropriate Information
  • Enter in : MIM Privileged Access Management Example Portal
  • Select the empty directory …
    • (C:\Program Files\Microsoft Forefront Identity Manager\2010\Privileged Access Management Portal) --> Click Ok
  • Enter Port: 8090
  • Click Ok

 

Finally copy the sample site to the empty directory and then test

 

ADDITIONAL RESOURCES / INFORMATION

• MIM 2016: Privileged Access Management (PAM) FAQ: https://social.technet.microsoft.com/wiki/contents/articles/33363.mim-2016-privileged-access-management-pam-faq.aspx
• Configure the MIM Environment for Privileged Access Management (PAM) : /en-us/microsoft-identity-manager/pam/configuring-mim-environment-for-pam
• Microsoft Identity Management (MIM) Privileged Access Management (PAM) Administrator: https://technet.microsoft.com/en-us/library/mt604080.aspx
• (MVP BLOG): Privileged Access Management (PAM): PAM Roles with Approvals (Part 1) : https://justidm.wordpress.com/2015/09/24/privileged-access-management-pam-roles-with-approvals-part-1/
• Installation of the Privileged Access Management (PAM) Feature: https://blogs.msdn.microsoft.com/connector_space/2015/08/25/installation-of-the-privileged-access-management-pam-feature/

 

MIM 2016 - PAM DOCUMENTATION

• MIMPAM Module: /en-us/powershell/identitymanager/mimpam/vlatest/mimpam
• PAM RESET API Service Details: /en-us/microsoft-identity-manager/reference/privileged-access-management-rest-api-service-details
• Privileged Access Management Rest API Reference: /en-us/microsoft-identity-manager/reference/privileged-access-management-rest-api-reference
• Privileged Access Management for Active Directory Domain Services: /en-us/microsoft-identity-manager/pam/privileged-identity-management-for-active-directory-domain-services

Comments

• Anonymous
  May 05, 2017
  Actually, just run the powershell command without the double "\" as the file path, and you're all set. New-WebSite -Name “MIM Privileged Access Management Example Portal” -Port 8090 -PhysicalPath “C:\Program Files\Microsoft Forefront Identity Manager\2010\Privileged Access Management Portal\”
  • Anonymous
    May 05, 2017
    Thank you for the information!