IDENTITY INFRASTRUCTURE AS A SERVICE

摘要

A method and system of an identity service to provide a single point of access for a plurality of applications for an authentication of a user identity. An authentication request is received from an application via an application program interface (API), wherein the authentication request includes logon information. The authentication request is translated to one or more identity providers. Upon authentication, serially executing one or more programmatic extension scripts associated with the user. Privileges are granted to the user based on at least one of the programmatic extension scripts associated with the user.

主权项

1. An identity service system configured to provide a single point of access for a plurality of applications for an authentication of a user identity, the system comprising:
an enterprise broker application programming interface (API) configured to provide programmatic access to an external authentication broker; an authentication broker; one or more database connections coupled to the authentication broker; a plurality of security delegates connected to the database connections; and a data store coupled to the plurality of security delegates and configured to store at least one of: (i) one or more user credentials, (ii) one or more extension scripts, and (iii) metadata.