ISO/IEC 9594-5:2020

Overview

ISO/IEC 9594-5:2020 (Information technology - Open systems interconnection - Part 5: The Directory: Protocol specifications) defines the core directory protocols used to access, distribute and manage directory information across heterogeneous systems. The standard specifies the Directory Access Protocol (DAP), Directory System Protocol (DSP), Directory Information Shadowing Protocol (DISP), and Directory Operational Binding Management Protocol (DOP) that implement the abstract services in the ISO/IEC 9594 series. Annexes include ASN.1 modules for the protocol syntax and identifiers. The ninth edition adds technical revisions and defines both version 1 and version 2 protocol behaviors.

Key topics

• Protocol specifications: Formal definitions for DAP, DSP, DISP and DOP to support directory access, request chaining, information shadowing, and operational binding management.
• Protocol stacks and mappings: Detailed mapping of Directory protocols onto the OSI stack and onto the IDM/TCP stack, including session, transport and application-context considerations.
• ASN.1 modules: Annexes provide ASN.1 definitions for common protocol elements and directory protocols to support implementation and interoperability.
• Extensibility and versioning: Rules for protocol extensibility, use of extension markers, and handling of version negotiation (notably some features such as signed errors require version 2).
• Coexistence and interoperability: Guidance on coexistence of OSI and IDM stacks, interoperability with LDAP environments, and addressing schemes for IP/NSAP-like addresses.
• Conformance: Requirements and conformance clauses for Directory User Agents (DUAs), Directory System Agents (DSAs), shadow suppliers and shadow consumers.

Applications and who should use it

ISO/IEC 9594-5:2020 is essential for:

• Directory service implementers - vendors building DSAs/DUAs and directory servers that must interoperate across vendors and platforms.
• Identity and access management (IAM) architects - designing distributed identity stores, replication (shadowing) and operational bindings.
• System integrators - connecting heterogeneous systems and ensuring directory request chaining and protocol compatibility.
• Standards bodies and profiles - using the foundational framework to define industry or deployment-specific directory profiles.
• Security and network engineers - deploying secure directory transport (e.g., TLS mappings) and planning addressing and protocol coexistence.

Practical uses include enterprise directory infrastructures, distributed address and resource lookups, cross-domain identity synchronization, and replication/administration of directory data in multi-vendor environments.

Related standards

• ISO/IEC 9594 series (Parts 2–4, 9) - abstract directory models and services referenced by this part.
• ITU‑T X.501, X.511, X.518, X.519 - corresponding ITU recommendations aligned with the ISO/IEC specifications.
• LDAP profiles and industry-specific directory profiles (for LDAP coexistence and practical deployments).

Keywords: ISO/IEC 9594-5:2020, Directory Access Protocol, DAP, DSP, DISP, DOP, ASN.1, OSI, IDM, directory services, LDAP, DSA, DUA.