Data management for a multi-tenant identity cloud service
AssigneeOracle International Corporation
InventorsGregg Wilson, Venkateswara Reddy Medam
Life of this patent
Estimating the term…
Abstract
Cloud based identity management is provided by receiving a request from an application by a web gate for a resource, where the request includes an operation on a resource type out of a plurality of resource types and the request specifies a tenant out of a plurality of tenants. Embodiments access a microservice based on the request, resolve the resource type, and validate that the operation is supported by the resource type based on metadata. Embodiments get a data provider associated with the tenant, call the data provider to perform the operation, and then return the resource.
Claims20
A non-transitory computer readable medium having instructions stored thereon that, when executed by a processor, cause the processor to provide cloud based identity management, the providing comprising:
- receiving a request from an application by a web gate for a resource, wherein the request comprises an operation on a resource type out of a plurality of resource types and the request specifies a tenant out of a plurality of tenants, the resource type comprising a schema definition, and the schema definition comprises a plurality of attributes and metadata for each of the attributes, the resource type comprising one of a user or a second application;
- accessing a microservice based on the request;
- resolving the resource type comprising determining the resource type and retrieving corresponding schema and schema definitions;
- validating that the operation is supported by the resource type based on the metadata;
- getting a data provider associated with the tenant;
- calling the data provider to perform the operation;
- and
- returning the resource.
A method of providing cloud based identity management, the method comprising:
- receiving a request from an application by a web gate for a resource, wherein the request comprises an operation on a resource type out of a plurality of resource types and the request specifies a tenant out of a plurality of tenants, the resource type comprising a schema definition, and the schema definition comprises a plurality of attributes and metadata for each of the attributes, the resource type comprising one of a user or a second;
- accessing a microservice based on the request;
- resolving the resource type comprising determining the resource type and retrieving corresponding schema and schema definitions;
- validating that the operation is supported by the resource type based on the metadata;
- getting a data provider associated with the tenant;
- calling the data provider to perform the operation;
- and
- returning the resource.
A system for providing cloud based identity and access management, comprising:
- a plurality of tenants;
- a plurality of microservices;
- and
- one or more hardware processors that execute instructions to:
- receive a request from an application by a web gate for a resource, wherein the request comprises an operation on a resource type out of a plurality of resource types and the request specifies a tenant out of the plurality of tenants, the resource type comprising a schema definition, and the schema definition comprises a plurality of attributes and metadata for each of the attributes, the resource type comprising one of a user or a second application;
- access a microservice out of the plurality of microservices based on the request;
- resolve the resource type comprising determining the resource type and retrieving corresponding schema and schema definitions;
- validate that the operation is supported by the resource type based on the metadata;
- get a data provider associated with the tenant;
- call the data provider to perform the operation;
- and
- return the resource.
Dependencies are inferred from the claim text.