Which term describes the directory-based repository that stores and retrieves identity data for users and resources within an organization?

Which term describes the directory-based repository that stores and retrieves identity data for users and resources within an organization?

• A. Directory Service
• B. Identity Store
• C. Federation
• D. Single Sign-On

Answer: (A)

In IAM, the directory service is the directory-based repository that stores and retrieves identity data for users and resources within an organization. It acts as a centralized, searchable store with a hierarchical structure of entries (such as users, groups, devices, and resources) and attributes used for authentication and authorization. This setup is typically accessed through directory-oriented protocols like LDAP and is designed to support fast lookups, centralized administration, and scalable identity management across systems. This is the best fit because it specifically describes a structured, directory-style repository for identity information. Other concepts describe different behaviors or capabilities: federation focuses on cross-domain identity sharing and trust, single sign-on describes a seamless authentication experience across multiple services after one login, and an identity store is a broader term that could refer to any storage location for identities, not necessarily a directory-based system.

In IAM, the directory service is the directory-based repository that stores and retrieves identity data for users and resources within an organization. It acts as a centralized, searchable store with a hierarchical structure of entries (such as users, groups, devices, and resources) and attributes used for authentication and authorization. This setup is typically accessed through directory-oriented protocols like LDAP and is designed to support fast lookups, centralized administration, and scalable identity management across systems.

This is the best fit because it specifically describes a structured, directory-style repository for identity information. Other concepts describe different behaviors or capabilities: federation focuses on cross-domain identity sharing and trust, single sign-on describes a seamless authentication experience across multiple services after one login, and an identity store is a broader term that could refer to any storage location for identities, not necessarily a directory-based system.