Zones are also used to record the primary source of
person and group information. They may be held within SkyVault or some
external source. While authorities can be in many zones, it makes sense for
an authority to be in only one authentication-related zone.
- AUTH.ALF is for authorities defined within SkyVault and not synchronized from an external source. This is the default zone for authentication.
- AUTH.EXT.<ID> is for authorities defined externally, such as in LDAP.