With IBM Tivoli Directory Server you can choose your authentication strategy, you can use simple user ID and password authentication, or you can implement the more secure digital certificate-based authentication structure. IBM Tivoli Directory Server also includes a Simple Authentication Security Layer (SASL) plug-in interface, including Challenge-Response Authentication Mechanism MD5 (CRAM-MD5) and Kerberos authentication if required.