US 12,603,871 B2Granted

Access orchestration engine in a cloud access management system

AssigneeMicrosoft Technology Licensing, LLC

InventorsZachary Cole Willson, Prasanna Chromepet Padmanabhan, Gaurav Raghu Dhawan, Yizhong Wu, Ivaylo Detelinov Ivanov, Purna Venkata S Bodapati, Suyin Liu, Wensheng Xu, Alexis Jade Lambert, William Lee Wayne Weston, Somesh Goel, Sandeep Patnaik

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

Methods, systems, and computer storage media for providing cloud access management using an access orchestration engine in a cloud access management system. Cloud access management provides access to a remote client of a consumer-identity-supported tenant environment of an organization. In operation, a consumer identity of a user is accessed. The consumer identity is approved for access to the consumer-identity-supported tenant environment. Based on accessing the consumer identity, access orchestration operations are executed for the remote client using remote client access resources, organization resources, and consumer identity resources. Executing the access orchestration operations comprises provisioning the remote client with remote access services for consumer identities; provisioning the remote client with organization resources; and priming the remote client with the consumer identity resources upon determining that the consumer identity is associated with the consumer-identity-supported tenant environment. The remote client is deployed, and the remote client is accessible based on the consumer identity.

Claims20

Dependent claims

A computerized system comprising:

one or more computer processors;
and
computer memory storing computer-useable instructions that, when used by the one or more computer processors, cause the one or more computer processors to perform operations, the operations comprising:
accessing an organization identifier of an organization, wherein the organization identifier is associated with a request to configure the organization for a consumer-identity-supported tenant environment that provides access to remote clients of the organization based on consumer identities;
executing a first plurality of access orchestration operations to configure the consumer-identity-supported tenant environment, wherein the consumer-identity-supported tenant environment is configured to authorize consumer-identity-based access to the remote clients;
communicating an indication that the organization is configured with the consumer-identity-supported tenant environment;
accessing a consumer identity of a user, wherein the consumer identity is approved for access to the consumer-identity-supported tenant environment;
based on accessing the consumer identity, executing a second plurality of access orchestration operations for a remote client, wherein executing the second plurality of access orchestration operations are executed based on remote access client resources, organization resources and consumer identity resources;
and
deploying the remote client, wherein the remote client is accessible using the consumer identity.

7 more elements

One or more computer-storage media having computer-executable instructions embodied thereon that, when executed by a computing system having a processor and memory, cause the processor to perform operations, the operations comprising:

accessing an organization identifier of an organization, wherein the organization identifier is associated with a request to configure the organization for a consumer-identity-supported tenant environment that provides access to remote clients of the organization based on consumer identities;
executing a first plurality of access orchestration operations to configure the consumer-identity-supported tenant environment, wherein the consumer-identity-supported tenant environment is configured to authorize consumer-identity-based access to the remote clients;
communicating an indication that the organization is configured with the consumer-identity-supported tenant environment;
accessing a consumer identity of a user, wherein the consumer identity is approved for access to the consumer-identity-supported tenant environment;
based on accessing the consumer identity, executing a second plurality of access orchestration operations for a remote client, wherein executing the second plurality of access orchestration operations are executed based on remote access client resources, organization resources and consumer identity resources;
and
deploying the remote client, wherein the remote client is accessible using the consumer identity.

4 more elements

A computer-implemented method, the method comprising:

accessing an organization identifier of an organization, wherein the organization identifier is associated with a request to configure the organization for a consumer-identity-supported tenant environment that provides access to remote clients of the organization based on consumer identities;
executing a first plurality of access orchestration operations to configure the consumer-identity-supported tenant environment, wherein the consumer-identity-supported tenant environment is configured to authorize consumer-identity-based access to the remote clients;
communicating an indication that the organization is configured with the consumer-identity-supported tenant environment;
accessing a consumer identity of a user, wherein the consumer identity is approved for access to the consumer-identity-supported tenant environment;
based on accessing the consumer identity, executing a second plurality of access orchestration operations for a remote client, wherein executing the second plurality of access orchestration operations are executed based on remote access client resources, organization resources and consumer identity resources;
and
deploying the remote client, wherein the remote client is accessible using the consumer identity.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/318,254Filed 16 May 2023
Published: US 2024/0388576 A121 Nov 2024
Granted: 14 Apr 2026
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

G06F 21/604
Protecting data: tools and structures for managing or administering access control systems
H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
G06F 21/31
Authentication, i.e. establishing the identity or authorisation of security principals: user authentication
G06F 21/41
User authentication: where a single sign-on provides access to a plurality of computers

Family

US 2024/0388576 A1Pre-grant publication · published 21 Nov 2024
US 12,603,871 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key