...
AccountStore – represents a directory or user store
ProtectedApplicationResource – represents an application
Account – user or HR record in an external directory/application
Group – group or application role in an external directory/application
GroupAccount – membership of user records in groups in external directories/applications
...
Deciding When You Need a Person Object
If the account is the HR record for a human being
If ….
If you would like to shop for access in the IT Shop for the Account
If you would like to assign EmpowerID roles to the account so it receives policy-controlled access
If the account will be used to authenticate to the EmpowerID API