Directory Capabilities

There are several kinds of directories with which iit consultants are familiar.

• Enterprise Directories. An enterprise directory is a major consolidation point for information about critical resources in an enterprise. Logically, there is a single central repository. But practically, the enterprise directory service is typically deployed as a system of interrelated directories. The data stores in this directory service are typically interfaced to critical authoritative sources for the data in the directories. iit consultants have extensive experience in the design, technology and software selection, and implementation of enterprise directory services, including the tools necessary to manage them in a production environment.
  
  
• NOS Directories. Network Operating System (NOS) directories are put in place to provide authentication to file, print and other such network services. They are generally tied intimately to the network services being provided. Microsoft's Active Directory product has highlighted this type of directory, as it is necessary to the roll-out of Windows 2000. iit has substantial experience in guiding these roll-outs, so that they can proceed expeditiously while still coexisting with enterprise directory initiatives.
  
  
• Meta-Directories. The term "Meta-Directory" has been used to mean many things by many people. iit uses the term to describe the overall service of interfacing and synchronizing the multiple directories and their sources of information in a typical enterprise directory environment.

Security Capabilities

• Single Sign-On. There are multiple vendors offering single sign-on technology. At the core of each of these systems is a directory, almost always an LDAP directory. iit consultants have found that the critical technical issues in these implementations involve integrating the single sign-on directory information with other enterprise directory information.
  
  
• Web Authentication. Web access to individualized portal information requires authentication and authorization for access. The directory required for this capability can be placed either inside or outside the firewall. However, the key point is wherever the directory is placed, it should be fed by the enterprise directory to keep it up-to-date.

Directory-Based Applications

Enterprise Directories tend to underlie several highly productive applications. These applications are frequently so pervasive that they become the responsibility of the infrastructure organization in an enterprise. In some cases, the return on these applications can be used to help justify the project to install an Enterprise Directory Service infrastructure. Such applications include:

• White Pages. This is the capability to look up a person's phone number when you know their name. But with an Enterprise Directory, one lookup can yield phone number, e-mail address, internal mail stop, and many other ways to find that person. With proper organization, a directory can also yield Yellow Page functionality (lookup by function) and Blue Page functionality (lookup by organization); again, a single lookup can yield multiple ways to contact a function or an organization.
  
  
• e-Provisioning. This is the coordination of all of the needs for a new employee, or one who is in the process of moving, and making sure that they are all available when he or she arrives at the new position. Items include a PC, network access, e-mail account, telephone and telephone number; they may also include physical security (building pass), mobile phones and other related items. Even more importantly, with a Directory-base provisioning system, it is possible to turn off all capabilities when the employee is terminated.

Directory Integration

One critical distinction between NOS directories and enterprise directories is that NOS directories tend to be contained within the network services that they manage, while enterprise directories receive and supply critical information to many systems throughout the enterprise. Furthermore, since most enterprise directory services involve multiple directories, directory interplay and synchronization become a significant design and implementation issue.

From another point of view, directory technology does not exist by itself. It is an integral part of an enterprise's overall technology infrastructure. It must conform to infrastructure standards, and it must integrate well into the overall infrastructure capability.

iit brings extensive experience and tools to the area of directory integration, assuring you that your directory service will fit well into your organization and support its requirements.

Related information on this web site: The section about Samples contains more information about how other clients use these capabilities. The section about Resources contains white papers and frameworks describing concepts iit uses in applying these capabilities.