Identity and Access Management

Dir DirectoryHigh-End Directory Server
High-performance, highly available, highly reliable, and secureLDAP / X.500 Directory Serverand LDAP ProxyThe Challenge
Directory services are critical components in today’s
interconnected business environment. They provide thefoundation for identity and access management acrossever-widening organizational boundaries, and can drivecompetitive advantage for the enterprise.

and authorized; and it must ensure that this service isprovided for a potentially very high number of users ordevices.

Within an intranet environment for example, a directory
service can provide a global repository for shared information about employees, organizations and resources
such as applications, network devices and things (IoT).
In an extranet, a directory service might maintain profile
information about customers, trading partners, and suppliers. Such a service might hold data from thousands up
to millions of identities.
In both environments, the directory service plays a criticalrole. It must manage the identities, and control accessto the information and services provided. It must makesure that access is fast, always available, authenticated

Our Solution
DirX Directory from Eviden is a standards-compliant, highperformance, highly available, reliable and secure Lightweight Directory Access Protocol (LDAP) and X.500 directory
server. It offers unlimited scalability with outstanding readand write performance combined with the latest security features to supports SSL/TLS for LDAP server and strong client
authentication, authorized, user access control, encrypted
communication, and server-side policies for local security
management.

Enterprise, carrier, and IoT ready, DirX Directory acts as theidentity store for employees, customers, partners, subscribers, and other e-business entities such as devices and thingsknow as the internet of things (IoT). Serving as a provisioning,access management, and metadirectory repository, it provides a single point of access to information available in anenterprise network or cloud environment, within disparateand heterogeneous directories.

The latest Security Models in a single Product
Key Strengths
Standards and Compatibility
Implements LDAPv3 and X. 500
directory standards.
Permits third-party LDAP-enabledapplications to manage the directory
schema via LDAP.
Runs on the most popular operatingsystems.
High Performance
Based on the innovative Directory
Basic Access Method (DBAM) databasekernel.
Optimized for directory access, allowing sub-second response times andhigh throughput rates for parallel queries.

Your Benefits
Security
Supports SSL/TLS for LDAP serverand client authentication, X.500 DAP
authentication, authorized user access
control, encrypted communication,and server-side policies for local security management.
Permits the creation and enforcementof password policies to control how
passwords are used and administeredin an enterprise network.
Supports policies for password complexity, aging, reuse after expiration,
and account lockout after failed logins.
LDAP Proxy
Rule-based LDAP request routing totarget servers.

Optimized for managing very large
user groups and data sets including dynamic and multi-level nested
groups.

Rule-based LDAP request and result
rewriting to support schema mapping.

Provides state-of-the-art multithreaded process architecture.

Scalability
DBAM database kernel is designed
to permit linear scalability in a single
directory server.

High Availability and Reliability
Supports floating master replication
for high availability configurations andfailover (a software solution instead ofadding hardware clusters).
Supports full and differential saving inparallel with directory update operations for backup and recovery.
Transaction processing in the databaseprovides guaranteed recovery after
crashes without data loss.
Identity Management
Manages user and subscriber profiles,
digital certificates for public key infrastructures (PKIs), authorization andauthentication information, and accesspermissions.
Manages other relevant attributes forusers, subscribers, and things (IoT) that
control access to information, network
resources, or distributed services.

Supports load balancing and failover.

DirX Directory accommodates future
growth on existing hardware configurations, and can scale rapidly to store
huge numbers of digital identities ofusers, devices or things in an intranet,extranet, cloud or IoT deployment, andcan scale from workgroup to enterpriseto e-business directory roles.
Administration
Offers powerful graphical and command-based scriptable tools of a distributed directory system, including
monitoring and logging functions.
Powerful administration tools andexcellent high performance audit capabilities for traffic analysis and accounting.

To keep identity and profile
data safe, DirX Directoryacts as the secure identity
store for employees,
customers, citizens,partners, subscribers, andother IoT entities

Eviden is a registered trademark © Copyright 2023, Eviden SAS – All rights reserved.

FS-230605-GW-DirX-Directory_Factsheet-EN

Provides cost-effective and reliable way
to handle large scale directory solutions
Excellent robustness, scalability andhigh availability
Outstanding read and write performance100+ million entries in one single server
Support of very large and dynamic
groups and attributes with very manyvalues
Comprehensive auditing and monitoring
No downtime for administration andbackup
Standard-based access, replication anddistribution (based on LDAP / X.500)
High availability through floating
master concept
Rule-based LDAP request routing andresult re-writing thru LDAP Proxy
LDAP Proxy for load balancing andfailover
Authentication server with comprehensive password policies
Rich security features and X.509 support
Scriptable and graphical administration