IDENTITY MANAGEMENT, AUTHORIZATION AND ENTITLEMENT FRAMEWORK

摘要

A system and method are provided for identity management of applications on computing devices. A set of applications are registered at an identity management system. Each application allows a different level of access permission to the application based on a user role associated with a user accessing the application. A set of user profiles associated with users are received. Each user profile includes a login credential for allowing access to the applications and a user role for defining a user level of access permission to the applications. An access request to access an application is received at the identity management system and responsive to the access request, a user associated with the access request is authenticated. Upon successful authentication, the user role associated with the authenticated user is determined and the user is allowed to access functions of the application corresponding to the determined user role.

主权项

1. A method comprising:
registering, at an identity management system, a plurality of applications, wherein each application has multiple levels of access permission and allows a different level of access permission from the multiple levels of access permission to the application based on a user role associated with a user accessing the application; receiving, at the identity management system, a plurality of user profiles associated with a plurality of users, each user profile including a login credential for allowing access to at least one of the plurality of applications and a user role for defining a user level of access permission to the at least one of the plurality of applications; receiving, at the identity management system, an access request to access the at least one of the plurality of applications; responsive to the access request, authenticating a user associated with the access request by comparing a login credential received from the user with the login credential associated with the user and stored in the user profile; upon successful authentication, determining the user role associated with the authenticated user; and allowing access to functions of the at least one of the plurality of applications corresponding to the determined user role.