for web applications, AAI (LDAP)