X.500 allows user rights and privileges to be designated globally, via network segments, via user groups or down to the individual. With this architecture, the best means today of ensuring accurate user authentication is the deployment of a PKI layer into the directory, using x.509 certificates embedded in the directory tree. What's more, should a breach occur, access rights should be granted based on the user. A sufficient security policy should apply user rights effectively ensuring a breach is minimal at best. Further, enhanced security applications such as Single Sign-on and Server Hardening can be applied to the corporate network based on attributes and objects placed in the user profile on the tree.
Security is but one aspect of a directory.
From a security aspect, this enables a corporation to tie together all systems and network devices through a ubiquitous protocol and enhanced monitoring, use and usage rights across the board and down to the user universally. Directories serve as the glue of a corporate network. The tie that binds No matter the security choice or technology used, the key to any secured infrastructure is inventory, planning and policy. An accurate inventory is a must. Following up with a clear-cut and defined plan incorporating network addressing and a chosen security architecture, and then wrapping it up with a vision and projection for growth is equally as important.