Introduction
A hotfix rollup package (build 4.7.13.0) is available for Microsoft Identity Manager (MIM) 2016 Service Pack 3 (SP3).
This update addresses several issues identified after the release of MIM 2016 SP3, and it adds new platform support. For more information, see the "Issues fixed and improvements added in this update" section. We recommend that all customers apply this update to their production systems.
For information about obtaining and installing the update, see the Microsoft Download Center and Prerequisites sections.
Update information
Microsoft Download Center
A supported update is available from the Microsoft Download Center. We recommend that all customers apply this update to their production systems.
Download Update for Microsoft Identity Manager 2016 (KB5134305)
Prerequisites
To apply this update, install the following prerequisites:
- Microsoft Identity Manager 2016 Service Pack 3 (SP3) build 4.7.6.0 or 4.7.9.0. This hotfix applies to both versions and brings both to the same version number.
Before installing this update:
- Verify the currently installed MIM version and build number.
- Review the components included in this update to select the files applicable to your environment.
- Back up the MIM databases and configurations.
- Plan for any required service interruptions or system restarts following installation.
Important: Customers upgrading from MIM 2016 SP3 should verify the supported upgrade path and any additional installation requirements before applying this update.
Important: Before applying this update, customers using MIM 2016 SP2 should upgrade to SP3 build 4.7.6.0 or 4.7.9.0. Follow the supported upgrade path in Upgrade Microsoft Identity Manager 2016 From Service Pack 2 to Service Pack 3.
Known issues
None
Restart requirement
You must restart the computer after you apply the add-ins and extensions package (MIMAddinsExtensions_x(64/86)_KB5134305.msp). You might also have to restart the server components.
After installing this update, it's recommended to have users clear the browser cache on all browsers that access the MIM Portal.
File information
The global version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it's converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
| File name | File size | Date | Time |
|---|---|---|---|
| MIMAddinsExtensions_x64_ KB5134305.msp | 16,023,552 | 29-October- 2026 | 03:50 PM |
| MIMAddinsExtensions_x86_ KB5134305.msp | 8,634,368 | 29-October- 2026 | 03:51 PM |
| MIMAddinsExtensionsLP_x64_ KB5134305.msp | 9,334,784 | 29-October- 2026 | 03:50 PM |
| MIMAddinsExtensionsLP_x86_ KB5134305.msp | 3,309,568 | 29-October- 2026 | 03:51 PM |
| MIMService_x64_KB5134305.msp | 183,013,376 | 29-October- 2026 | 03:50 PM |
| MIMServiceLP_x64_KB5134305.msp | 18,563,072 | 29-October- 2026 | 03:50 PM |
| MIMSyncService_x64_KB5134305.msp | 50,450,432 | 29-October- 2026 | 03:53 PM |
Issues fixed and improvements added in this update
MIM Service and Portal
Microsoft Graph support for Exchange Online
Added support for Microsoft Graph API as an alternative to Exchange Web Services (EWS) for MIM Service email functionality with Exchange Online.
Microsoft Graph uses application-only OAuth authentication to support MIM email notifications and the processing of approval and rejection responses.
This functionality provides a supported replacement for the existing EWS-based integration as Microsoft retires EWS access in Exchange Online.
Microsoft Graph integration is optional and must be explicitly enabled. Installing this update doesn't automatically migrate existing EWS configurations or change the MIM Service's current email integration.
Existing EWS-based configurations can continue operating where EWS access remains available. Customers using Exchange Online should plan to transition to Microsoft Graph before their existing EWS access is discontinued.
Important: Customers who intend to use Microsoft Graph must configure the required Microsoft Entra application permissions and enable the Graph-based mail integration. Refer to the Microsoft Graph configuration guidance for MIM Service before making this change.
ExportConfig and RCDC file downloads
Fixed a regression introduced in MIM 2016 SP3 that could cause ExportConfig and Resource Control Display Configuration (RCDC) file downloads to fail or time out when initiated through the MIM Portal.
The issue occurred when portal cache validation and session or identity context handling incorrectly rejected otherwise valid download requests.
This update corrects the affected download handling behavior, allowing configuration exports and RCDC file downloads to complete successfully without being incorrectly rejected during request validation.
Outlook 2024 compatibility
- Added support for the Microsoft Identity Manager (MIM) Outlook client add-ins, enabling their use with Microsoft Outlook 2024 for processing MIM workflow approval, rejection requests, and notification delivery.
MIM Synchronization Service memory consumption
Fixed an issue affecting the MIM Synchronization Service that could result in excessive memory consumption during synchronization operations following an upgrade to MIM 2016 Service Pack 3 (SP3).
In affected environments, memory utilization could increase significantly during synchronization run profiles and remain elevated after the operations completed, rather than returning to expected baseline levels.
This behavior could contribute to degraded synchronization performance, increased resource utilization, and potential service instability.
This update includes memory management improvements intended to correct the excessive memory consumption associated with this issue.
Synchronization Rule attribute flow — IsPresent()
- Fixed an issue affecting the IsPresent() function when used in a MIM Service Synchronization Rule attribute flow definition. When the function evaluated an attribute, whose value was null, the associated Management Agent could generate an AttributeNotInclusionListException, even though the attribute was included in the Management Agent configuration.
- This update corrects the behavior so that IsPresent() can evaluate null attribute values without triggering this exception solely because the attribute value is null.
Restored the Rules Extension logging namespace.
Resolved incompatibility issues affecting the following utility tools after upgrading to MIM 2016 Service Pack 3 (SP3), caused by the framework upgrade from .NET 3.5 to .NET 4.6.2.
Synchronization Service Key Management
Microsoft Identity Integration Server (MIIS) Warm Standby Activation Utility
Connector Space Export Utility
Management Agent Export Utility
Management Agent Packager Utility
Server Configuration Export Utility
References
Microsoft Identity Manager release history
Learn about the terminology that Microsoft uses to describe software updates.