Federated identity management for data repositories
AssigneeVaronis Systems, Inc.
InventorsManav Ratan Mital, Srinivas Nageswarrao Vadlamani, Pramod Chandraiah, Hugo Araújo de Sousa
Life of this patent
Estimating the term…
Abstract
A method and system for performing federated identity management are described. The method and system include receiving a communication for a data source at a wrapper. The wrapper includes a dispatcher and a service. The dispatcher receives the communication and is data agnostic. The communication corresponds to end user credentials for an end user. The method and system include providing the communication from the dispatcher to the data source and to the service. The method and system also use the service to authenticate the end user based on the end user credentials and utilizing federated identity management.
Claims15
A method, comprising:
- receiving a communication for a data source at a wrapper, the wrapper including a dispatcher and a service, the dispatcher receiving the communication and being data agnostic, the communication corresponding to end user credentials for an end user;
- providing the communication from the dispatcher to the data source and to the service;
- authenticating, using the service, the end user based on the end user credentials and utilizing federated identity management;
- performing a read only binding of the service to a federated identity management data source;
- and
- preventing access to the data source if the end user is not authenticated utilizing the federated identity management;
- wherein authenticating, using the service, the end user based on the end user credentials and utilizing federated identity management further comprises:
- providing the end user credentials to the federated identity management data source;
- and
- searching, using the read only binding, the federated identity management data source for the end user.
A system, comprising:
- a processor configured to:
- receive a communication for a data source at a wrapper, the wrapper including a dispatcher and a service, the dispatcher receiving the communication and being data agnostic, the communication corresponding to end user credentials for an end user;
- provide the communication from the dispatcher to the data source and to the service;
- authenticate, using the service, the end user based on the end user credentials and utilizing federated identity management;
- perform a read only binding of the service to a federated identity management data source;
- and
- prevent access to the data source if the end user is not authenticated utilizing the federated identity management;
- and
- a memory coupled to the processor and configured to provide the processor with instructions;
- wherein to authenticate, using the service, the end user based on the end user credentials and utilizing federated identity management the processor is further configured to:
- provide the end user credentials to the federated identity management data source;
- and
- search, using the read only binding, the federated identity management data source for the end user.
A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
- receiving a communication for a data source at a wrapper, the wrapper including a dispatcher and a service, the dispatcher receiving the communication and being data agnostic, the communication corresponding to end user credentials for an end user;
- providing the communication from the dispatcher to the data source and to the service;
- authenticating, using the service, the end user based on the end user credentials and utilizing federated identity management;
- performing a read only binding of the service to a federated identity management data source;
- and
- preventing access to the data source if the end user is not authenticated utilizing the federated identity management;
- wherein authenticating, using the service, the end user based on the end user credentials and utilizing federated identity management further comprises:
- providing the end user credentials to the federated identity management data source;
- and
- searching, using the read only binding, the federated identity management data source for the end user.
Dependencies are inferred from the claim text.