standard, vendor neutral protocol for access,manage, and query centralized directory services

used by an org to securely store user credentials groups, permissions, allowing employees to log onto multiple services using the same username/password