Systems, methods and apparatuses for identity access management and web services access

A non-transitory computer-readable medium storing program codes, when executed by a processor of a user device, configures the user device to perform operations of identity access management for web services, the operations comprising:

• creating on a user device, a session's access token and an identity token to be sent along with a request for accessing web services, wherein:
• the accessing of web services comprising at least one of:
• retrieving and pushing information from an instance storage which is client specific and protected from unauthorized access by another instance storage;
• the session's access token indicates a location where the session's access token was created, an expiration time, and a hash identity for verifying a validity of the session's access token;
• the identity token identifies a user who sends the request;
• and
• authenticating the user on the user device according to the session's access token and the identity token to authorize the accessing of web services in a session.