Port 5725Microsoft Identity Lifecycle Manager Service

TCP 5725 is the Microsoft ILM/FIM resource-management service endpoint, used by clients and the portal to manage identity data.

transport
tcp

single transport

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
2/10

safe

lookups
0

rank 993 of 5,560 · top 18%

also known as ms-ilm, FIM Service, Forefront Identity Manager Service

Technical Details

what runs on :5725

The service uses TCP port 5725 for its resource-management endpoint, exposed as a Windows Communication Foundation (WCF) SOAP service. Common FIM configurations use an HTTP endpoint such as ResourceManagementService on this port; the separate synchronization service is commonly associated with TCP 5726. Exact endpoint and security configuration can vary by product version and deployment.

Security Information

exposure of :5725

risk score

2/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

security averages 3.0 across 397 ports — this one sits 1.0 below.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

This is an administrative identity-management API, so access could expose or alter sensitive identity data and workflows. Keep it on trusted internal networks and restrict access to authorized FIM clients and servers; do not publish it to the internet. Common configurations use HTTP on this port rather than TLS, so protect traffic with network controls or configure suitable transport security.

the 8 most looked-up other ports in security — 397 ports carry that label.

risk mix of the 8 listed

  • caution100%

2 of 8 encrypted