|
In computing, the term virtual directory has a couple of meanings. It may simply designate (for example in IIS) a folder which appears in a path but which is not actually a subfolder of the preceding folder in the path. However, this article will discuss the term in the context of directory services and identity management. A virtual directory or virtual directory server in this context is a software layer that delivers a single access point for identity management applications and service platforms. A virtual directory operates as a high-performance, lightweight abstraction layer that resides between client applications and disparate types of identity-data repositories, such as proprietary and standard directories, databases, web services, and applications. A virtual directory receives queries and directs them to the appropriate data sources by abstracting and virtualizing data. The virtual directory integrates identity data from multiple heterogeneous data stores and presents it as though it were coming from one source. This ability to reach into disparate repositories makes virtual directory technology ideal for consolidating data stored in a distributed environment. , virtual directory servers most commonly use the LDAP protocol, but more sophisticated virtual directories can also support SQL as well as DSML and SPML. Industry experts have heralded the importance of the virtual directory in modernizing the identity infrastructure. According to Dave Kearns of Network World, "Virtualization is hot and a virtual directory is the building block, or foundation, you should be looking at for your next identity management project." In addition, Gartner analyst, Bob Blakley〔The Emerging Architecture of Identity Management, Bob Blakley, April 16, 2010.〕 said that virtual directories are playing an increasingly vital role. In his report, “The Emerging Architecture of Identity Management,” Blakley wrote: “In the first phase, production of identities will be separated from consumption of identities through the introduction of a virtual directory interface.” ==Capabilities== Virtual directories can have some or all of the following capabilities:〔(【引用サイトリンク】title=An Introduction To Virtual Directories )〕 * Aggregate identity data across sources to create a single point of access. * Create high-availability for authoritative data stores. * Act as identity firewall by preventing denial-of-service attacks on the primary data stores through an additional virtual layer. * Support a common searchable namespace for centralized authentication. * Present a unified virtual view of user information stored across multiple systems. * Delegate authentication to backend sources through source-specific security means. * Virtualize data sources to support migration from legacy data stores without modifying the applications that rely on them. * Enrich identities with attributes pulled from multiple data stores, based on a link between user entries. Some advanced identity virtualization platforms can also: * Enable application-specific, customized views of identity data without violating internal or external regulations governing identity data. Reveal contextual relationships between objects through hierarchical directory structures. * Develop advanced correlation across diverse sources using correlation rules. * Build a global user identity by correlating unique user accounts across various data stores, and enrich identities with attributes pulled from multiple data stores, based on a link between user entries. * Enable constant data refresh for real-time updates through a persistent cache. 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「Virtual directory」の詳細全文を読む スポンサード リンク
|