Learn how the Access Management terms apply to ThinkSystem SAN Manager.

Term Description

Active Directory

Active Directory (AD) is a Microsoft directory service that uses LDAP for Windows domain networks.


Bind operations are used to authenticate clients to the directory server. Binding usually requires account and password credentials, but some servers allow for anonymous bind operations.


A certificate authority (CA) is a trusted entity that issues electronic documents, called digital certificates, for Internet security. These certificates identify website owners, which allows for secure connections between clients and servers.


A certificate identifies the owner of a site for security purposes, which prevents attackers from impersonating the site. The certificate contains information about the site owner and the identity of the trusted entity who certifies (signs) this information.


Lightweight Directory Access Protocol (LDAP) is an application protocol for accessing and maintaining distributed directory information services. This protocol allows many different applications and services to connect to the LDAP server for validating users.


Role-based access control (RBAC) is a method of regulating access to computer or network resources based on the roles of individual users. SAN Manager includes predefined roles.


Security Assertion Markup Language (SAML) is an XML-based standard for authentication and authorization between two entities. SAML allows for multi-factor authentication, in which users must provide two or more items for proving their identity (for example, a password and fingerprint). The storage array’s embedded SAML feature is SAML2.0 compliant for identity assertion, authentication, and authorization.


Single sign-on (SSO) is an authentication service that allows for one set of login credentials to access multiple applications.

Web Services Proxy

The Web Services Proxy, which provides access through standard HTTPS mechanisms, allows administrators to configure management services for storage arrays. The proxy can be installed on Windows or Linux hosts. The SAN Manager interface is available with the Web Services Proxy.