# US 12,015,675 B2 · System and method for tagging in identity management artificial intelligence systems and uses for same, including context based governance > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,015,675 B2 - Document ID: US12015675B2 - Status: Granted - Kind: B2 - Application number: 17/848,057 - Filed: 2022-06-23 - Published: 2022-12-29 - Granted: 2024-06-18 - Earliest claimed: 2019-06-13 - Assignees: Sailpoint Technologies, Inc. - Applicants: SailPoint Technologies, Inc. - Inventors: Norman Anderson, III; Jeffrey Foreman; Amar Rama - Web page: https://patentgrep.com/patent/US12015675B2 ## CPC - H04L 63/102: {Entity profiles} - H04L 67/306: User profiles - G06F 16/2264: {Multidimensional index structures} - G06F 16/2443: {Stored procedures} - H04L 63/105: {Multiple levels of security} - H04L 63/108: {when the policy decisions are valid for a limited amount of time} - H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Systems and methods for embodiments of artificial intelligence systems for identity management are disclosed. Embodiments of the identity management systems disclosed herein may support the creation, association, searching, or visualization of any relevant context to identity management assets for a variety of purposes, including for informing the identity management systems' manual or automated decisions, processes or workflows. ## Claims ### Claim 1 An identity management system, comprising: a processor; a non-transitory, computer-readable storage medium, including computer instructions for: maintaining a search index for identity management artifacts utilized in identity management of a distributed enterprise computing environment and determined based on identity management data obtained from one or more source systems in the distributed enterprise computing environment, the search index comprising a document for each of the identity management artifacts; determining a set of the identity management artifacts utilized in identity management in the distributed enterprise computing environment, the determined set of the identity management artifacts each being associated with a specified criteria; associating a tag with the determined set of the identity management artifacts; for each of the set of identity management artifacts, determining the corresponding document; storing the tag in each of the corresponding documents; and indexing the tag in the search index, thereby allowing the set of identity management artifacts to be searched using the tag and the search index. ### Claim 2 (depends on 1) The identity management system of claim 1, wherein determining the set of identity management artifacts comprises searching the set of identity management artifacts based on the specified criteria. ### Claim 3 (depends on 1) The identity management system of claim 1, wherein the tag was associated before at least one of the set of the identity management artifacts was determined from the identity management data. ### Claim 4 (depends on 1) The identity management system of claim 1, wherein the tag is indexed in association with the at least one of the of the set of the identity management artifacts at the same time the document for the at least one of the of the set of the identity management artifacts is determined or created in the search index. ### Claim 5 (depends on 1) The identity management system of claim 1, wherein determining a set of the identity management artifacts is based on an association of each of the set of the identity management artifacts with a particular identity management artifact. ### Claim 6 (depends on 5) The identity management system of claim 5, wherein determining the set of the identity management artifacts are identities and the particular identity management artifact is an entitlement. ### Claim 7 (depends on 5) The system of claim 5, wherein the tag is obtained from the particular identity management artifact. ### Claim 8 A method, comprising: maintaining a search index for identity management artifacts utilized in identity, the search index comprising a document for each of the identity management artifacts; determining a set of the identity management artifacts utilized in identity management in the distributed enterprise computing environment, the determined set of the identity management artifacts each being associated with a specified criteria; associating a tag with the determined set of the identity management artifacts; for each of the set of identity management artifacts, determining the corresponding document; storing the tag in each of the corresponding documents; and indexing the tag in the search index, thereby allowing the set of identity management artifacts to be searched using the tag and the search index. ### Claim 9 (depends on 8) The method of claim 8, wherein determining the set of identity management artifacts comprises searching the set of identity management artifacts based on the specified criteria. ### Claim 10 (depends on 8) The method of claim 8, wherein the tag was associated before at least one of the set of the identity management artifacts was determined from the identity management data. ### Claim 11 (depends on 8) The method of claim 8, wherein the tag is indexed in association with the at least one of the of the set of the identity management artifacts at the same time the document for the at least one of the of the set of the identity management artifacts is determined or created in the search index. ### Claim 12 (depends on 8) The method of claim 8, wherein determining a set of the identity management artifacts is based on an association of each of the set of the identity management artifacts with a particular identity management artifact. ### Claim 13 (depends on 12) The method of claim 12, wherein determining the set of the identity management artifacts are identities and the particular identity management artifact is an entitlement. ### Claim 14 (depends on 12) The method of claim 12, wherein the tag is obtained from the particular identity management artifact. ### Claim 15 A non-transitory computer readable medium, comprising instructions that are executable by one or more processors for: maintaining a search index for identity management artifacts utilized in identity management of a distributed enterprise computing environment and determined based on identity management data obtained from one or more source systems in the distributed enterprise computing environment, the search index comprising a document for each of the identity management artifacts; determining a set of the identity management artifacts utilized in identity management in the distributed enterprise computing environment, the determined set of the identity management artifacts each being associated with a specified criteria; associating a tag with the determined set of the identity management artifacts; for each of the set of identity management artifacts, determining the corresponding document; storing the tag in each of the corresponding documents; and indexing the tag in the search index, thereby allowing the set of identity management artifacts to be searched using the tag and the search index. ### Claim 16 (depends on 15) The non-transitory computer readable medium of claim 15, wherein determining the set of identity management artifacts comprises searching the set of identity management artifacts based on the specified criteria. ### Claim 17 (depends on 15) The non-transitory computer readable medium of claim 15, wherein the tag was associated before at least one of the set of the identity management artifacts was determined from the identity management data. ### Claim 18 (depends on 15) The non-transitory computer readable medium of claim 15, wherein the tag is indexed in association with the at least one of the of the set of the identity management artifacts at the same time the document for the at least one of the of the set of the identity management artifacts is determined or created in the search index. ### Claim 19 (depends on 15) The non-transitory computer readable medium of claim 15, wherein determining a set of the identity management artifacts is based on an association of each of the set of the identity management artifacts with a particular identity management artifact. ### Claim 20 (depends on 19) The non-transitory computer readable medium of claim 19, wherein determining the set of the identity management artifacts are identities and the particular identity management artifact is an entitlement.