System for controlling access to a plurality of target systems and applications

A method for controlling access to one or more of a plurality of target systems, the method comprising:

• receiving profile data that defines one or more features associated with a plurality of individuals with one or more entitlements of those individuals, each entitlement indicative of target system access;
• generating a model that relates the one or more features and the one or more entitlements of the plurality of individuals;
• receiving profile data that defines one or more features associated with a target individual from a first user management system;
• determining a class of the plurality of individuals to which the target individual belongs according to a K-nearest neighbor algorithm;
• determining one or more entitlements associated with the plurality of individuals of the class;
• for each entitlement of the one or more entitlements, determining a number of members of the plurality of individuals of the class having the entitlement;
• selecting entitlements associated with a number of members, N, that is above a predetermined threshold as entitlements to be granted to the target individual;
• generating, based on the profile data and the model, a listing that includes one or more entitlements associated with the target individual, and confidence values associated with the one or more entitlements, each confidence value indicative of whether the target individual should be granted a corresponding entitlement;
• and
• for each entitlement having a corresponding confidence value higher than a predetermined threshold, communicating an instruction to a target system associated with the entitlement to allow the target individual access to the target system.

Non-transitory computer readable media that stores instruction code for controlling access to one or more of a plurality of target systems, the instruction code being executable by a machine for causing the machine to perform acts comprising:

• receiving profile data that defines one or more features associated with a plurality of individuals with one or more entitlements of those individuals, each entitlement indicative of target system access;
• generating a model that relates the one or more features and the one or more entitlements of the plurality of individuals;
• receiving profile data that defines one or more features associated with a target individual from a first user management system;
• determining a class of the plurality of individuals to which the target individual belongs according to a K-nearest neighbor algorithm;
• determining one or more entitlements associated with the plurality of individuals of the class;
• for each entitlement of the one or more entitlements, determining a number of members of the plurality of individuals of the class having the entitlement;
• selecting entitlements associated with a number of members, N, that is above a predetermined threshold as entitlements to be granted to the target individual;
• generate, based on the profile data and the model, a listing that includes one or more entitlements associated with the target individual, and confidence values associated with the one or more entitlements, each confidence value indicative of whether the target individual should be granted a corresponding entitlement;
• and
• for each entitlement having a corresponding confidence value higher than a predetermined threshold, communicating an instruction to a target system associated with the entitlement to allow the target individual access to the target system.