Systems and methods for emergency shutdown and restore of access entitlements responsive to security breach

An emergency shutdown and restore system, comprising:

• a processor;
• a non-transitory computer-readable medium;
• and
• stored instructions translatable by the processor for:
• obtaining, in response to a user instruction or a security breach occurring in an enterprise computing environment, an identity population definition, the identity population definition defining a population of identities in the enterprise computing environment based on a set of attributes of identity management artifacts;
• determining, based at least on the identity population definition, a set of accounts associated with the population of identities, the set of accounts distributed across applications in the enterprise computing environment;
• determining source systems of the set of accounts, each of the source systems having a source-specific connector;
• and
• requesting, via the source-specific connector respectively, each of the source systems to shut down access to the applications by the set of accounts associated with the population of identities, or to exclude the set of accounts associated with the population of identities in shutting down access to the applications in the enterprise computing environment.

A computer program product for emergency shutdown and restore, the computer program product comprising a non-transitory computer-readable medium storing instructions translatable by a processor for:

• obtaining, in response to a user instruction or a security breach occurring in an enterprise computing environment, an identity population definition, the identity population definition defining a population of identities in the enterprise computing environment based on a set of attributes of identity management artifacts;
• determining, based at least on the identity population definition, a set of accounts associated with the population of identities, the set of accounts distributed across applications in the enterprise computing environment;
• determining source systems of the set of accounts, each of the source systems having a source-specific connector;
• and
• requesting, via the source-specific connector respectively, each of the source systems to shut down access to the applications by the set of accounts associated with the population of identities, or to exclude the set of accounts associated with the population of identities in shutting down access to the applications in the enterprise computing environment.