Many organizations maintain Microsoft Active Directory as an authoritative identity source for users and groups. When an employee or business partner walks through the door for the first time - and the last time - Active Directory is immediately updated to reflect the staffing change. This makes Active Directory the ideal identity source for Enterprise User Security (EUS) in an Oracle Database. However, configuring EUS to work effectively with Active Directory is not an easy task: there are several options for authenticating users against AD, and each option has various positives and negatives. This session discusses the architecture options for EUS, and how to determine which option fits best for an organization.