Home >>  Products >>  VIS >>  Features

Virtual Identity Server

(VIS) - The .NET LDAP Virtual Directory

Features


VIS is the fastest, most comprehensive LDAP virtual directory available. VIS is built entirely in .NET managed code, and enhances the Microsoft infrastructure providing the key data transformaton and virtualization needs.

Below are just some of the features of the Virtual Identity Server

Cross-forest group membership without trusts

Most organizations do not have a single, centralized Active Directory Forest or domain. As a result group management becomes cumbersome and complicated, often involving intricate permissions and forest trusts.

The Virtual Identity Server solves this by providing robust group management, without requiring any forest trusts.

The Virtual Identity Server allows you to have:

  • Static Group Membership - Users from multiple LDAP directories or forest can be added as static members of a group; without trusts.
  • Virtual Dynamic Group Membership - Users from multiple LDAP directories or forest are dynamically "added" to the group based on meeting a criteria that is evaluated at run-time.

^ back to top

Comprehensive Audit and Compliance

The Virtual Identity Server can help your organization meet audit and compliance initiatives such as those required by Sarbanes Oxley (SOX), Basel II, European Union Privacy Directive, Capital Accord HIPAA and Gramm-Leach-Bliley Act.

VIS has complete and comprehensive audit logging of all activity. All LDAP operations are logged and stored to a Microsoft SQL Server database for easy reporting and retrieval.

Using the built-in web reporting , you can easily report on who logged in and when, and what changes they made. Reports can even be auto-scheduled for email distribution in a wide variety of formats (PDF, XLS, HTML).

The Virtual Identity Server can help you answer questions such as:

  • Who has logged in and when?
  • What changes were made to data and when?
  • Who was added to the Administrators group today?
  • What changes did "Bob" make?

^ back to top

Powerful Join and Merge Options - Without Custom Code

The Virtual Identity Server provides powerful joining and merging options, allowing you to easily present multiple views or a single enterprise view of data existing across multiple siloed directories in real-time. VIS provides sophisticated data transformation and virtualization with the ease of a point and click configuration.

Join & Merge Options of the Virtual Identity Server include:

  • Union Mode- Provides a combination or collection of the objects from all connected source directories.
  • Object Precedence Mode (OP)- Provides an authoritative order at a directory level. For users that exist and are joined in x number of directories always return “this” user object.
  • Attribute Precedence (AP) Mode– Provides a merged view of objects (Givenname, SN from Internal directory and sAMAccountName and HealthID from External directory.


The Virtual Identity Server can:

  • Provide a single enterprise view of data across multiple siloed directories
  • Provide a different view of the data on an application by application basis
  • Allow different rights/access to data (i.e. update or read only) on an application by application basis
  • Transform, merge and map data from multiple LDAP directories to a virtual name or namespace

^ back to top

Virtual Active Directory Schema

The Virtual Identity Server eliminates the need to extend the Active Directory schema for 3rd party applications. Custom schema and data is stored at the virtual layer and is applied to objects automatically in real-time.

  • Any custom/third party schema can be applied within VIS instead of Active Directory,reducing the complexity of custom schema
  • Custom schema is applied automatically on-the-fly and unlike other solutions requires no custom coding, or replication of objects.
  • A common custom schema can now be applied easily across multiple Active Directory forests without any changes to the Active Directory environment.

^ back to top

Robust Scaling and Caching

The Virtual Identity Server scales horizontally or vertically to meet the needs of enterprise deployments. VIS has built-in connection pooling, and full support for failover and load balancers.

  • VIS can be placed behind a load balancer (hardware or software) to provide robust failover/redundancy for applications connecting to VIS.
  • VIS scales either horizontally or vertically to meet the demanding needs of enterprise deployments.
  • VIS offers robust caching options, allowing you to cache objects on a connection by connection basis or even objectclass basis. Objects can have a cache size limit and a time limit or both.

^ back to top

Extensible Solution

The Virtual Identity Server is an extenisible solution, allowing an organization to customize the software to meet specific needs.

  • The Virtual Identity Server can be extended using any standard .NET programming language such as VB.NET or C#
  • Custom adapters can easily written leveraging the base VIS .NET objects that are visible within Visual Studio.

^ back to top

Enhanced Microsoft Centric Platform

The Virtual Identity Server increases the value of your existing Microsoft environment.

  • VIS leverages the existing investment in Microsoft technology, extending it with increased functionality.
  • VIS is developed in .NET technology and is designed to seamless integrate with your Microsoft environment.
  • VIS is a platform that continues to grow with an organization's needs.
  • VIS has proven solutions for Microsoft applications such as SharePoint and MIIS/ILM

^ back to top

Enhanced Application Environment

The Virtual Identity Server provides an enhanced application environment. VIS allows organizations to rapidly and easily deploy applications to users existing in multiple Active Directory forests or directories.

  • The VIS Schema Manager™ eliminates the need to extend the Active Directory schema for third party LDAP applications.
  • VIS allows you to rapidly deploy applications to users existing in multiple Active Directory Forests without any forest trusts.
  • VIS simplifies your identity managment deployment by accessing data at its source directly.
  • VIS provides multiple views of data, allowing for easy discrete application views of enterprise data.

^ back to top