Reference attributes for related stored objects in a multi-tenant cloud service

A non-transitory computer-readable medium having instructions stored thereon that, when executed by a processor, cause the processor to perform storing and using object relationships in a multi-tenant cloud-based identity and access management (IAM) system, the performing comprising:

• defining a schema for storing related objects, wherein the schema includes reference attributes indicative of relationships between the related objects in a database and linking the objects, wherein the schema defines a relationship type and a persistence scope for each reference attribute and each of the related objects comprises a System for Cross-domain Identity Management (SCIM) based object;
• constructing an in-memory representation of the related objects and their relationships based on the schema, wherein the in-memory representation indicates the relationship type and the persistence scope for each reference attribute;
• and
• using the in-memory representation of the related objects to perform an IAM service for a client of the multi-tenant cloud-based IAM system, the IAM service comprising a request for a first object;
• the relationship type defined for each of the reference attributes and indicating one of:
• whether a corresponding reference attribute is indicative of a direct relationship, an indirect relationship, and a self-nested relationship between related objects comprising a referrer object and a referred object, the persistence scope indicating whether a corresponding reference attribute is persisted or non-persisted, wherein the direct relationship indicates that a corresponding referrer object and referred object are directly related, the indirect relationship indicates that the corresponding referrer object and referred object are connected through at least one other object and the self-nested relationship indicates that the corresponding referrer object and referred object are a same object;
• and
• the reference attributes are SCIM based and enable navigation from a referee object to a reference object and navigation from the reference object to the referee object.

A system comprising:

• one or more processors;
• and
• a computer-readable medium having instructions stored thereon that, when executed by the processors, cause the processors to perform storing and using object relationships in a multi-tenant cloud-based identity and access management (IAM) system, the performing comprising:
• defining a schema for storing related objects, wherein the schema includes reference attributes indicative of relationships between the related objects in a database and linking the objects, wherein the schema defines a relationship type and a persistence scope for each reference attribute and each of the related objects comprises a System for Cross-domain Identity Management (SCIM) based object;
• constructing an in-memory representation of the related objects and their relationships based on the schema, wherein the in-memory representation indicates the relationship type and the persistence scope for each reference attribute;
• and
• using the in-memory representation of the related objects to perform an IAM service for a client of the multi-tenant cloud-based IAM system, the IAM service comprising a request for a first object;
• the relationship type defined for each of the reference attributes and indicating one of:
• whether a corresponding reference attribute is indicative of a direct relationship, an indirect relationship, and a self-nested relationship between related objects comprising a referrer object and a referred object, the persistence scope indicating whether a corresponding reference attribute is persisted or non-persisted, wherein the direct relationship indicates that a corresponding referrer object and referred object are directly related, the indirect relationship indicates that the corresponding referrer object and referred object are connected through at least one other object and the self-nested relationship indicates that the corresponding referrer object and referred object are a same object;
• and
• the reference attributes are SCIM based and enable navigation from a referee object to a reference object and navigation from the reference object to the referee object.