Atos DirX Directory

Identity & Access Management (IAM) is a core component of enterprise IT security because it governs identities and entitlements across systems and applications. Directory services are foundational to IAM and are now often embedded within cloud-delivered access management (IDaaS) offerings or bundled platforms such as Microsoft Active Directory and Azure Active Directory. Although traditional stand-alone, high-end directory servers receive less market attention today, they remain important for large-scale back-end scenarios that demand extreme performance, scalability, and robustness.

Digital transformation is increasing the prevalence of digital services involving millions of users, devices, and “things,” creating renewed demand for enterprise-grade directory backends. High-end directory use cases include customer directories for telecoms and B2C services, citizen and patient directories in healthcare, and identity backends for IoT scenarios such as connected cars. Many current digital service implementations are expected to hit limitations in integrated directory components—especially within some IDaaS offerings—and may shift toward specialized directory backends.

Atos (via its Evidian business unit) offers DirX Directory (version 8.9), a stand-alone, enterprise-grade directory server supporting LDAPv3 and X.500. It relies on a specialized database kernel (DBAM) optimized for directory workloads, with extensive caching and in-memory features rather than a standard RDBMS. DirX Directory supports multiple access and replication protocols (including LDAP, DAP, DSP, DISP, and IDM) and provides high availability through multi-DSA deployments, “floating master” failover, and flexible synchronization options. Additional capabilities include an integrated LDAP Proxy with routing and schema rewriting, full transaction support with rollback, and mature security features such as granular access control, PKI support, auditing, and non-disruptive backup. Key challenges include the lack of out-of-the-box REST APIs and the absence of a modern web-based administrative UI.

• IAM manages identities and their access by handling user accounts and entitlements across systems and applications.
• Directory services are often an integral part of cloud services such as IDaaS access management solutions.
• Microsoft Active Directory and Microsoft Azure Active Directory are delivered as part of other Microsoft services.
• High-end directory backends are used for telecom customer directories, healthcare citizen and patient directories, B2C customer directories, and IoT-related digital services such as connected cars.
• DirX Directory is provided by Evidian, a business unit of Atos, and is described as currently in version 8.9.
• DirX Directory delivers full LDAPv3 and X.500 functionality.
• The product uses a specialized database kernel named DBAM and does not utilize a standard RDBMS.
• Supported access protocols include LDAP, DAP, DSP, DISP, and IDM.
• DirX Directory supports shadow DSAs and “floating master” behavior for failover of a master DSA.
• Administration is performed via a Java-based graphical UI, and management interfaces include LDAP, RPC, and LDIF.

• “As part of the Digital Transformation, creating digital services involving millions of users, devices, and things has become the new normal for many businesses.”
• “These digital services require a strong identity backend, including directory services that can scale, that are highly performant, and that are extremely robust.”
• “DirX Directory does not utilize a standard RDBMS (Relational Database Management System) or other standard components.”
• “While these protocols deliver a comprehensive implementation of both LDAPv3 and X.500, there are no out-of-the-box REST APIs or other modern protocols available, which would simplify utilizing DirX Directory by developers of modern digital services.”
• “DirX Directory e.g. supports shadow DSAs that take over the role of a master DSA in case of failures of the previous master DSA.”
• “This is also called ‘floating master’.”
• “Another important capability of DirX Directory is the full transaction support including rollback and consistency checks for all operations that modify data in the directory services.”
• “Administration of DirX Directory lacks a modern, web-based UI.”
• “DirX Directory counts amongst the leading-edge directory services in the market.”
• “While stand-alone directory servers aren’t the common choice of today, there are clear benefits of utilizing such services in well-thought-out, advanced architectures.”