Can LDAP solutions do the same thing?
No. Directories – including LDAP – are very good at storing basic information about people such as name, address, and phone number. They are unable to model and manage relationships – which is why they are unable to support the kind of dynamic definition of roles and privilege that large organizations demand. In addition, LDAP directories have no notion of time; all changes occur now and overwrite all previous data.
