Multi-way trust formation in a distributed system

A method comprising:

• receiving, by a first computing device of a plurality of first computing devices included in a first system and located at a first site, a certificate of a second system, the second system comprising a plurality of second computing devices located at a second site that is different from the first site, the certificate of the second system including a public cryptographic key of the second system and an identity of the second system, wherein the first system and the second system are in communication with a shared identity provider system that maintains user credential information for at least users of the first system and the second system;
• in response to receiving the certificate of the second system, sending, by the first computing device, to the second system, the certificate of the second system;
• in response to sending the certificate of the second system to the second system, receiving, by the first computing device, from the second system, a response signed with the certificate of the second system indicating that the first system can trust communications from the second system;
• obtaining, by the first computing device, from the shared identity provider system, a credential of a user of the second system;
• in response to receiving the response signed with the certificate of the second system, sending, by the first computing device, to the second system, the credential of the user of the second system, the second system redirecting the credential to the shared identity provider system for authentication, wherein the authentication indicates that the second system can trust communications from the first system;
• and
• sending, by the first computing device, to the second system, a certificate of the first system, a certificate of the first system including a public cryptographic key of the first system and an identity of the first system,
• wherein, based at least on the first computing device receiving the response signed with the certificate of the second system, and further based on authentication of the credential of the user of the second system, trusted communications are established between the first system and the second system.

One or more non-transitory computer-readable media storing instructions that, when executed by a first computing device of a plurality of computing devices included in a first system and located at a first site, configure the first computing device to perform operations comprising:

• receiving, by the first computing device, a certificate of a second system, the second system comprising a plurality of second computing devices located at a second site that is different from the first site, the certificate of the second system including a public cryptographic key of the second system and an identity of the second system, wherein the first system and the second system are in communication with a shared identity provider system that maintains user credential information for at least users of the first system and the second system;
• in response to receiving the certificate of the second system, sending, by the first computing device, to the second system, the certificate of the second system;
• in response to sending the certificate of the second system to the second system, receiving, by the first computing device, from the second system, a response signed with the certificate of the second system indicating that the first system can trust communications from the second system;
• obtaining, by the first computing device, from the shared identity provider system, a credential of a user of the second system;
• in response to receiving the response signed with the certificate of the second system, the credential of the user of the second system, the second system redirecting the credential to the shared identity provider system for authentication, wherein the authentication indicates that the second system can trust communications from the first system;
• and
• sending, by the first computing device, to the second system a certificate of the first system, the certificate of the first system including a public cryptographic key of the first system and an identity of the first system,
• wherein, based at least on the first system receiving the response signed with the certificate of the second system, and further based on authentication of the credential of the user of the second system, trusted communications are established between the first system and the second system.