Multi-tenant identity cloud service with on-premise authentication integration and bridge high availability

A non-transitory computer-readable medium storing instructions which, when executed by at least one of a plurality of processors, cause the processors to operate a multi-tenant cloud system, the operating comprising:

• receiving a request for an authenticate action for a user, the request received at the multi-tenant cloud system from an on-premise active directory via a firewall;
• in response to the request, at the multi-tenant cloud system creating an authenticate target action;
• registering a cache listener at the multi-tenant cloud system for a cache comprising a filter to listen for a target action response that is responsive to the authenticate target action, the filter listing a plurality of bridges assigned to the on-premise active directory, each bridge mapped to a same active directory domain, the cache listener generating a cache callback when a cache event occurs;
• randomly selecting one of the plurality of bridges and sending the authenticate target action to the active directory from the multi-tenant cloud system via the selected bridge, each of the plurality of bridges comprising a different bridge identifier and coupled to the multi-tenant cloud system and the on-premise active directory, each bridge sending a count of records it can process with the request;
• waiting for the cache callback;
• and
• at the cache callback, receiving at the multi-tenant cloud system via the on-premise active directory a target action response comprising a result of the authenticate action.

A multi-tenant cloud system for a plurality of user accounts, the system comprising:

• one or more processors in communication with a client system that receives a request for an authentication action from a user, the processors:
• receiving a request for an authenticate action for a user, the request received at the multi-tenant cloud system from an on-premise active directory via a firewall;
• in response to the request, at the multi-tenant cloud system creating an authenticate target action;
• registering a cache listener at the multi-tenant cloud system for a cache comprising a filter to listen for a target action response that is responsive to the authenticate target action, the filter listing a plurality of bridges assigned to the on-premise active directory, each bridge mapped to a same active directory domain, the cache listener generating a cache callback when a cache event occurs;
• randomly selecting one of the plurality of bridges and sending the authenticate target action to the active directory from the multi-tenant cloud system via the selected bridge, each of the plurality of bridges comprising a different bridge identifier and coupled to the multi-tenant cloud system and the on-premise active directory, each bridge sending a count of records it can process with the request;
• waiting for the cache callback;
• and
• at the cache callback, receiving at the multi-tenant cloud system via the on-premise active directory a target action response comprising a result of the authenticate action.