# US 10,484,243 B2 · Application management for a multi-tenant identity cloud service > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,484,243 B2 - Document ID: US10484243B2 - Status: Granted - Kind: B2 - Application number: 15/707,110 - Filed: 2017-09-18 - Published: 2018-03-22 - Granted: 2019-11-19 - Earliest claimed: 2016-09-16 - Assignees: Oracle International Corporation - Applicants: Oracle International Corporation - Inventors: Gary Cole; Amol Dharmadhikari - Web page: https://patentgrep.com/patent/US10484243B2 ## CPC - H04L 41/0806: for initial configuration or provisioning, e.g. plug-and-play - G06F 3/0482: Interaction with lists of selectable items, e.g. menus - H04L 41/0246: Exchanging or transporting network management information using the Internet; Embedding network management web servers in network elements; Web-services-based protocols - H04L 41/0866: Checking the configuration - H04L 67/51: Discovery or management thereof, e.g. service location protocol [SLP] or web services - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04L 67/75: Indicating network or usage conditions on the user display - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Embodiments provide application management functionality in a multi-tenant identity cloud service. Embodiments define a plurality of facets for the application, each facet describing a behavior of the application. Embodiments define an application template for the application that includes metadata to generate default values for the application. Embodiments generate a user interface (“UI”) that includes functionality to configure all of the defined facets. ## Claims ### Claim 1 A method of managing an application of a plurality of applications in a multi-tenant identity cloud service comprising a plurality of cloud service users, the method comprising: defining a plurality of facets for the application, each facet describing a behavior of the application; defining an application template for each type of application of the plurality of applications, each application template comprising metadata to generate default values for the respective application; and generating a user interface (UI) comprising functionality to configure all of the defined facets for the application, including a plurality of base common facets common to all of the plurality of applications, after selecting the type of application via the UI; the common facets comprising an identifier that identifies a System for Cross-domain Identity Management (SCIM) resource within the cloud service that represents the application, and a name that is used when the application acts as an OAuthClient in OAuth-protocol flows. ### Claim 2 (depends on 1) The method of claim 1, wherein each facet comprise information that the application needs in order to perform a specific role when interacting with a runtime service of the multi-tenant identity cloud service. ### Claim 3 (depends on 1) The method of claim 1, wherein the facets further comprising an unmanaged application facet that accepts one of the cloud service users as a login identity, or a managed application facet indicating that the application relies on its own identity repository, and a login target facet that allows the cloud service to log the cloud service users into the application automatically. ### Claim 4 (depends on 1) The method of claim 1, wherein the facets comprise an OAuth Resource facet that allows an application to act as an OAuthResource in OAuth-protocol flows. ### Claim 5 (depends on 1) The method of claim 1, wherein the facets comprise a LoginTarget facet that allows users to log into the application automatically. ### Claim 6 (depends on 1) The method of claim 1, wherein the facets comprise a SamlServiceProvider facet that allows the application to act as a Service Provider in runtime flows of a Security Assertion Markup Language (SAML) protocol. ### Claim 7 (depends on 1) The method of claim 1, wherein the UI provides functionality to allow a user to add at least one of a Security Assertion Markup Language (SAML) application, a mobile application or a trusted application. ### Claim 8 A non-transitory computer readable medium having instructions stored thereon that, when executed by a processor, cause the processor to manage an application of a plurality of applications in a multi-tenant identity cloud service comprising a plurality of cloud service users, the manage comprising: defining a plurality of facets for the application, each facet describing a behavior of the application; defining an application template for each type of application of the plurality of applications, each application template comprising metadata to generate default values for the respective application; and generating a user interface (UI) comprising functionality to configure all of the defined facets for the application, including a plurality of base common facets common to all of the plurality of applications, after selecting the type of application via the UI; the common facets comprising an identifier that identifies a System for Cross-domain Identity Management (SCIM) resource within the cloud service that represents the application, and a name that is used when the application acts as an OAuthClient in OAuth-protocol flows. ### Claim 9 (depends on 8) The computer readable medium of claim 8, wherein each facet comprise information that the application needs in order to perform a specific role when interacting with a runtime service of the multi-tenant identity cloud service. ### Claim 10 (depends on 8) The computer readable medium of claim 8, wherein the facets further comprising an unmanaged application facet that accepts one of the cloud service users as a login identity, or a managed application facet indicating that the application relies on its own identity repository, and a login target facet that allows the cloud service to log the cloud service users into the application automatically. ### Claim 11 (depends on 8) The computer readable medium of claim 8, wherein the facets comprise an OAuth Resource facet that allows an application to act as an OAuth Resource in OAuth-protocol flows. ### Claim 12 (depends on 8) The computer readable medium of claim 8, wherein the facets comprise a LoginTarget facet that allows users to log into the application automatically. ### Claim 13 (depends on 8) The computer readable medium of claim 8, wherein the facets comprise a SamlServiceProvider facet that allows the application to act as a ServiceProvider in runtime flows of a Security Assertion Markup Language (SAML) protocol. ### Claim 14 (depends on 8) The computer readable medium of claim 8, wherein the UI provides functionality to allow a user to add at least one of a Security Assertion Markup Language (SAML) application, a mobile application or a trusted application. ### Claim 15 A system for providing cloud based identity and access management, comprising: a plurality of tenants; a plurality of microservices; and one or more processors that manage an application of a plurality of applications in a multi-tenant identity cloud service comprising a plurality of cloud service users, the manage comprising: defining a plurality of facets for the application, each facet describing a behavior of the application; defining an application template for each type of application of the plurality of applications, each application template comprising metadata to generate default values for the respective application; and generating a user interface (UI) comprising functionality to configure all of the defined facets for the application, including a plurality of base common facets common to all of the plurality of applications, after selecting the type of application via the UI; the common facets comprising an identifier that identifies a System for Cross-domain Identity Management (SCIM) resource within the cloud service that represents the application, and a name that is used when the application acts as an OAuthClient in OAuth-protocol flows. ### Claim 16 (depends on 15) The system of claim 15, wherein each facet comprise information that the application needs in order to perform a specific role when interacting with a runtime service of the multi-tenant identity cloud service. ### Claim 17 (depends on 15) The system of claim 15, wherein the facets further comprising an unmanaged application facet that accepts one of the cloud service users as a login identity, or a managed application facet indicating that the application relies on its own identity repository, and a login target facet that allows the cloud service to log the cloud service users into the application automatically. ### Claim 18 (depends on 15) The system of claim 15, wherein the facets comprise an OAuth Resource facet that allows an application to act as an OAuthResource in OAuth-protocol flows. ### Claim 19 (depends on 15) The system of claim 15, wherein the facets comprise a LoginTarget facet that allows users to log into the application automatically. ### Claim 20 (depends on 15) The system of claim 15, wherein the facets comprise a SamlServiceProvider facet that allows the application to act as a Service Provider in runtime flows of a Security Assertion Markup Language (SAML) protocol.