Shared identity management (idm) integration in a multi-tenant computing environment

A computer-implemented method comprising:

• extracting, by a first computer system of an infrastructure system, a tenant name and a service name of a service from a name included in a request by a user to access the service provided by the infrastructure system;
• authenticating, by the first computer system, the user by requesting a second computer system to determine whether the user is a member of a tenant having the tenant name with the second computer system, wherein the second computer system is different from the first computer system;
• based on successfully authenticating the user as the member of the tenant having the tenant name in the second computer system, accessing a directory of the second computer system to identify one or more roles that are both associated with the user and with a first service having the service name with the second computer system, wherein the infrastructure system provides access to the first service;
• and
• based on determining that a role of the one or more roles associated with the user is permitted to perform an operation specified in the request relative to the service specified in the request, enabling the user to access the first service to perform the operation.

A system comprising:

• one or more processors;
• and
• a memory accessible to the one or more processors, the memory storing instructions that, upon execution by the one or more processors, causes the one or more processors to:
• extract, at an infrastructure system, a tenant name and a service name of a service from a name included in a request by a user to access the service provided by the infrastructure system;
• authenticate the user by requesting a computer system to determine whether the user is a member of a tenant having the tenant name with the computer system;
• based on successfully authenticating the user as the member of the tenant having the tenant name in the computer system, access a directory of the computer system to identify one or more roles that are both associated with the user and with a first service having the service name with the computer system, wherein the infrastructure system provides access to the first service;
• and
• based on determining that a role of the one or more roles associated with the user is permitted to perform an operation specified in the request relative to the service specified in the request, enable the user to access the first service to perform the operation.