Hybrid cloud-based authentication for flash storage array access

An apparatus for comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:

• sending, by a storage array access module to the client-side array services module, a redirect to a cloud-based security module distinct from the storage array access module;
• receiving, by the storage array access module from the client-side array services module, a token generated by the cloud-based security module and provided by the cloud-based security module to the client-side array services module, wherein the token indicates an authentication of the user input credentials from the client-side array services module by the cloud-based security module and authorized access privileges defined by the cloud-based security module for the user for one or more storage array services;
• and
• granting, by the storage array access module utilizing the access privileges for the user indicated by the token generated by the cloud-based security module, access to the user to the one or more storage array services.

A computer program product disposed upon a non-transitory computer readable medium, wherein the non-transitory computer readable medium is not a signal, the computer program product comprising computer program instructions that, when executed, cause a computer to carry out the steps of:

• sending, by a storage array access module to the client-side array services module, a redirect to a cloud-based security module distinct from the storage array access module;
• receiving, by the storage array access module from the client-side array services module, a token generated by the cloud-based security module and provided by the cloud-based security module to the client-side array services module, wherein the token indicates an authentication of the user input credentials from the client-side array services module by the cloud-based security module and authorized access privileges defined by the cloud-based security module for the user for one or more storage array services;
• and
• granting, by the storage array access module utilizing the access privileges for the user indicated by the token generated by the cloud-based security module, access to the user to the one or more storage array services.