|
All Editions |
Web-Based Online Directory |
Out-of-the-box, all editions include a pre-configured, customizable search application that leverages your existing Active Directory identity data to create a fully functional corporate white page solution. |
|
All Editions |
AD LDS/ADAM Support |
Provides the option to retrieve information from Microsoft’s Active Directory Lightweight Directory Services (previously known as Active Directory Application Mode). |
|
All Editions |
OCS/LCS Presence |
With the OCS/LCS presence information from Office Communications Server 2007, rDirectory users can see who is available and right-click to take immediate action using any enabled Office Communicator 2007 client capabilities - chat, video, audio, even Voice over IP (VoIP). |
Enterprise
Professional
Standard |
Self-Service Editing |
A customizable My Profile application can be configured to allow users to update their own information or any field that is a self-editable attribute. |
Enterprise
Professional
Standard |
Data Integrity Controls |
rDirectory includes advanced compliance controls, such as custom validation expressions, pick lists and object selectors that can be used to prevent users from entering inaccurate or improper values when updating their profiles. |
Enterprise
Professional
Standard |
Photo Support |
Allows the display and editing of photos. The photo control renders the image as a JPEG with auto-scaling to maintain aspect ratios. |
Enterprise
Professional
Standard |
Audit Logs
Email Notification |
Email based event notifications are supported on all edit, create, delete, and manage functions, including password reset events and myPassword intrusion detection events.
In rDirectory, an Email Notification Policy object can be used to specify what type of events to subscribe to, where the email should be sent, what subject field each event should be sent with, and an XSLT message body template that can be used to format the ‘who changed what and when’ information of the event. By default, the Email Event notifications contain the same information recorded in the Audit Events. |
Enterprise
Professional
Standard |
Role-Based
Access Control |
Roles can authorize access to menus, applications and other components, creating a dynamic application interface for different audiences by presenting only authorized applications to the appropriate audience.
rDirectory expands on the familiar group-based authorization model by adding the ability to define access based on three role types.
-
Group-Based Roles – Similar to the default authorization model, group-based roles are supported for any security groups in Active Directory.
-
Relationship-Based Roles – Custom expressions are used to leverage existing relationships in the directory when delegating tasks to users.
-
Claim-Based Roles – Custom Expressions allow a user to utilize the value of a specific attribute to access information.
|
Enterprise
Professional
Standard |
Portal Integration |
The entire rDirectory website can be easily hosted inside a Portal such as SharePoint or any other web-application. rDirectory also supports hosting a single rDirectory application (such as an rDirectory Search, Detail, Create, or Web Application) for a seamless presentation. |
Enterprise
Professional
Standard*
*requires
myPassword |
Help Desk
Password Reset |
This feature provides the ability to delegate password resets to the Help Desk that enable the staff to backup the self-service password reset (myPassword). The Help Desk can use the same Password Reset Profile used in myPassword to assure the caller's identity. |
Enterprise
Professional
Standard |
Validate Data Tasks |
Allows rDirectory to enforce data integrity and require a user to correct missing, malformed or misspelled data, for their own information or for their direct reports. |
Enterprise
Professional |
Certify Information Tasks |
Allows a user to periodically review and confirm that information in the directory is correct and up-to-date, for their own information or for their direct reports. |
Enterprise
Professional |
Flexible Role-Based
Delegation |
Roles provide a rich and flexible authorization mechanism that can be used for delegation. Traditionally, roles are based on group membership and are applied to a specific feature to allow an operator access to that feature if they are a member of a group. In addition to this traditional concept of roles, rDirectory adds new types of roles and methods for applying them that greatly increases the flexibility and power of roles.
Roles can be based on:
-
Group Memberships – Group-Based Roles are supported for any security group in Active Directory
-
Relationships– Relationship-Based Roles are custom expressions that you create, for example Manager-User
-
Claims – Claim-Based Roles are custom expressions you create that test an attribute for a value
|
Enterprise
Professional |
Group Management |
By leveraging Roles and Proxy Accounts to implement delegation, a wide variety of custom group management solutions can be easily deployed. For example:
-
Edit members in a group – the operator can edit the 'member' attribute of a group
-
Edit the groups a user is in – the operator can edit the 'memberOf' attribute of a user
|
Enterprise
Professional |
Group Self Subscription |
This feature allows the operator to view a list of all the distribution groups that can be joined, subscribe to that group and receive email notification of group activity. Conversely, users can remove themselves from distribution groups when they no longer wish to be a member.
Another form of self-subscription is to leverage the Query-Based Distribution List mechanism available in Exchange. A Query-Based Distribution List queries Active Directory for users that match its LDAP search filter to get its list of effective members. rDirectory can allow users to edit their attributes that the Query-Based Distribution List is searching for. By adding or removing the values being searched to their own object, they will in effect, be subscribing or un-subscribing from these groups. |
|
Enterprise |
Account Management |
Allow users to delegate permissions to the Help Desk without modifying their native Active Directory permissions, enabling them to perform basic account maintenance tasks, (unlock, disable, expire and delete) as well as add or delete users from groups. Email notifications can be generated for these events. |
|
Enterprise |
Claim Based Roles |
Claim-Based roles are custom expressions you create that test an attribute for a value. For example, a Claim-Based role may test a group’s description attribute for the value ‘Subscribable’ and be used to authorize the Group Self-Subscription feature of rDirectory for groups that have this value in this attribute. |
|
Enterprise |
Templatized User
and Group Provisioning |
This feature allows an administrator to pre-populate information based on user function, department, domain/OU or physical location, and many other criteria. Administrators can allow or deny modifications to specific attributes depending on the rights of the operator, maintaining control of the provisioning process and ensuring that every user is provisioned consistently with the access and resources they need. |
Enterprise
*optional addon |
Exchange Provisioning* |
Upon creation, user accounts can be provisioned with an Exchange 2003 or 2007 Mailbox when user accounts are created. The mail alias can be auto-generated using a variety of formats from the first and last name entered. |
Enterprise
*optional addon |
Home Folder Provisoning* |
Upon creation, user accounts can be provisioned with Home Folders that are automatically created and secured. |
Enterprise
*optional addon |
Optional Schema
Extension Pack* |
This optional feature extends the schema with a number of useful new attributes that can be utilized by rDirectory, including linked and location attributes. |
|
Enterprise |
OCS/LCS Provisioning |
Allows rDirectory to automatically populate appropriate SIP information needed for Office Communicator when an Active Directory user account is created. |
Enterprise
Professional
Standard |
Self Service
Password Reset
 |
Using myPassword, users can edit their password reset profile, change their password, reset their passwords and/or unlock their own account. |