Directory Services To Large Enterprises In The Development And Implementation

As China's XX industry reform and development of information technology, the XX Corporations from all levels have built an integrated enterprise-wide information integration platform, including five components, information networks, data exchange, data center, application integration, and enterprise portals; and they have built eight major business systems such as the finance (financial) management, marketing management, safety management, collaborative office, human resource management, materials management, project management and integrated management, and so on. Before the "XX" Project integration platform putting into practice, each grid system member has a separate set of account and password. Multiple systems frequently log on, the users are extremely inconvenient to use; the accounts between the national grid and the province, and the accounts among the same province grid are repetitious, which making the accounts management disordered; login security certification is inadequate; different system permissions for different users, roles, management confusion; account password is forgotten and so there are always things happen. According to XX Corporation "XX project" construction plan and integration platform, the overall architecture design requires the XX Corporation of the whole network building a unified directory, identity management and authentication system as an integrated platform, for enterprise-class part of the eight business applications and other applications to provide user authentication, account supply, single sign-on, business system permissions, role assignments and other basic support services.Directory services technology uses the underlying LDAP directory to store and manage the information of users, organizational structure, application systems, roles and other, through identity management systems and other applications for the above information in sync. At the same time, it protects users'access to the various application systems through a unified authentication system proxy, to achieve single sign-on, single-point log out, access control and audit functions. In the end, it helps to achieve a mechanism in which the directory system is centric information storage, along with management and distribution systems. Directory services provide a unified user management, storage entrance, which brings in easy management, low-cost maintenance and securities focused, but also help users for their own information management and maintenance, to achieve real-time updates of personal information.This paper first introduces the technical overview of the current directory, and then combined with the author himself in XX Company directory service development of the project implementation process, including research into the design and development from requirements to implement on-line processes, such as an integrated human resources systems and performance appraisal system elaborated. This paper proposed and implemented by a directory-based services technology platform, through this platform to complete various business systems, single sign-on and identity synchronization building.