Version control integration in cross-domain-based authentication systems

A computer-implemented method, comprising:

• receiving, from a third-party identity management system, an authentication response indicating a set of login attributes for an authenticated user;
• obtaining, from an identity resolution service, a set of identity and authorization attributes for the authenticated user using the set of login attributes, wherein the set of identity and authorization attributes at least include a unique user identifier (UID) and one or more unique group identifiers (GIDs) associated with the authenticated user;
• granting, by the identity resolution service, a session initiation token when the set of identity and authorization attributes satisfy predefined authorization criteria;
• in response to the identity resolution service granting the session initiation token:
• allocating a compute session to the unique user identifier, and
• allocating a persistent storage resource to the unique user identifier, wherein allocating the persistent storage resource to the unique user identifier includes:
• transmitting the session initiation token from the compute session to a network file system,
• decrypting the session initiation token to extract the unique user identifier and the one or more unique group identifiers,
• determining that the network file system includes a security policy authorizing the unique user identifier and the one or more unique group identifiers to copy one or more files in the network file system, and
• allocating the persistent storage resource to the unique user identifier in response to determining that the network file system includes the security policy;
• executing, via the compute session, an operation for the authenticated user that modifies the one or more files stored in the persistent storage resource;
• and
• transmitting, to a version control system, a version control operation that records the one or more files modified in the persistent storage resource to a code repository using the unique user identifier or the one or more unique group identifiers.

A computer-implemented system comprising:

• one or more processors;
• a memory;
• and
• a computer-readable medium operably coupled to the one or more processors, the computer-readable medium having computer-readable instructions stored thereon that, when executed by the one or more processors, cause a computing device to perform operations comprising:
• receiving, from a third-party identity management system, an authentication response indicating a set of login attributes for an authenticated user;
• obtaining, from an identity resolution service, a set of identity and authorization attributes for the authenticated user using the set of login attributes, wherein the set of identity and authorization attributes at least include a unique user identifier (UID) and one or more unique group identifiers (GIDs) associated with the authenticated user;
• granting, by the identity resolution service, a session initiation token when the set of identity and authorization attributes satisfy predefined authorization criteria;
• in response to the identity resolution service granting the session initiation token:
• allocating a compute session to the unique user identifier, and
• allocating a persistent storage resource to the unique user identifier, wherein allocating the persistent storage resource to the unique user identifier includes:
• transmitting the session initiation token from the compute session to a network file system,
• decrypting the session initiation token to extract the unique user identifier and the one or more unique group identifiers,
• determining that the network file system includes a security policy authorizing the unique user identifier and the one or more unique group identifiers to copy one or more files in the network file system, and
• allocating the persistent storage resource to the unique user identifier in response to determining that the network file system includes the security policy;
• executing, via the compute session, an operation for the authenticated user that modifies the one or more files stored in the persistent storage resource;
• and
• transmitting, to a version control system, a version control operation that records the one or more files modified in the persistent storage resource to a code repository using the unique user identifier or the one or more unique group identifiers.