Method and system for facilitating identity and access management in a cloud environment

A computing device configured to implement an execution of a method for facilitating identity and access management in a cloud environment based on a zero-trust configuration, the computing device comprising:

• a processor;
• a memory;
• and
• a communication interface coupled to each of the processor and the memory,
• wherein the processor is configured to:
• retrieve, via a job, at least one token from a corresponding identity provider, the job including at least one from among a unit of work and a unit of execution that corresponds to at least one change, and the identify provider provides principal authentication to other service providers within a federation;
• retrieve, via the job and in response to the at least one token and a change authorization identifier, a change authorization from a change management system, the change authorization including the at least one token and a signed change authorization;
• retrieve, via the job and in response to the at least one token and a change plan artifact path, a change artifact from an artifact repository, the change artifact including a signed change artifact;
• request, via the job, a change orchestrator to execute the at least one change, the request including at least one from among the at least one token, the change authorization, and the change artifact;
• instruct, via the change orchestrator, a service broker to execute the at least one change;
• obtain, via the service broker, a root change authorization token for the at least one change;
• and
• execute, via the service broker and using the root change authorization token, the at least one change within the cloud environment,
• wherein the service broker is implemented by an open service broker, and
• wherein an authorized change initiator is required to directly request a first level of the open service broker to actuate the at least one change, and the authorized change initiator is required to submit a valid change authorization token with a request to the open service broker.

A non-transitory computer readable storage medium storing instructions for facilitating identity and access management in a cloud environment based on a zero-trust configuration, the storage medium comprising executable code which, when executed by a processor, causes the processor to:

• retrieve, via a job, at least one token from a corresponding identity provider, the job including at least one from among a unit of work and a unit of execution that corresponds to at least one change, and the identify provider provides principal authentication to other service providers within a federation;
• retrieve, via the job and in response to the at least one token and a change authorization identifier, a change authorization from a change management system, the change authorization including the at least one token and a signed change authorization;
• retrieve, via the job and in response to the at least one token and a change plan artifact path, a change artifact from an artifact repository, the change artifact including a signed change artifact;
• request, via the job, a change orchestrator to execute the at least one change, the request including at least one from among the at least one token, the change authorization, and the change artifact;
• instruct, via the change orchestrator, a service broker to execute the at least one change;
• obtain, via the service broker, a root change authorization token for the at least one change;
• and
• execute, via the service broker and using the root change authorization token, the at least one change within the cloud environment,
• wherein the service broker is implemented by an open service broker, and
• wherein an authorized change initiator is required to directly request a first level of the open service broker to actuate the at least one change, and the authorized change initiator is required to submit a valid change authorization token with a request to the open service broker.