What directory services can the system interface with?

The Framework can integrate with Active Directory.

Also, because the Framework does not ship with a database it is possible to integrate with bespoke directory services or to create a user database within each specific application.

It is often the case that both Active Directory and an user database specific to the application will be used. This allows authentication to be undertaken via Active Directory and then for the roles to be controlled by the application manager/adminstrator - this avoids the need to create/edit groups at an Active Directory level.