Rest-based declarative policy management
AssigneeOracle International Corporation
InventorsAshutosh PITRE, Gregg WILSON, Prashant SRINIVASAN
Life of this patent
Estimating the term…
Abstract
One embodiment provides declarative policy management in a multi-tenant cloud-based identity and access management (“IAM”) system. The embodiment receives at least one Application Programming Interface (“API”) request by a policy engine of the multi-tenant cloud-based IAM system from a tenant of the multi-tenant cloud-based IAM system. The embodiment configures a declarative policy for the tenant of the multi-tenant cloud-based IAM system based on the at least one API request. The embodiment then enforces the declarative policy in an IAM service performed for the tenant of the multi-tenant cloud-based IAM system.
Claims20
A method for declarative policy management in a multi-tenant cloud-based identity and access management (IAM) system, the method comprising:
- receiving at least one Application Programming Interface (API) request by a policy engine of the multi-tenant cloud-based IAM system from a tenant of the multi-tenant cloud-based IAM system;
- configuring a declarative policy for the tenant of the multi-tenant cloud-based IAM system based on the at least one API request;
- and
- enforcing the declarative policy in an IAM service performed for the tenant of the multi-tenant cloud-based IAM system.
A system comprising:
- a computer-readable medium storing instructions;
- and
- a processor configured to execute the instructions, wherein the instructions, when executed by the processor, cause the processor to perform declarative policy management in a multi-tenant cloud-based identity and access management (IAM) system, the performing comprising:
- receiving at least one Application Programming Interface (API) request by a policy engine of the multi-tenant cloud-based IAM system from a tenant of the multi-tenant cloud-based IAM system;
- configuring a declarative policy for the tenant of the multi-tenant cloud-based IAM system based on the at least one API request;
- and
- enforcing the declarative policy in an IAM service performed for the tenant of the multi-tenant cloud-based IAM system.
A computer-readable medium storing instructions that, when executed by a processor, cause the processor to perform declarative policy management in a multi-tenant cloud-based identity and access management (IAM) system, the performing comprising:
- receiving at least one Application Programming Interface (API) request by a policy engine of the multi-tenant cloud-based IAM system from a tenant of the multi-tenant cloud-based IAM system;
- configuring a declarative policy for the tenant of the multi-tenant cloud-based IAM system based on the at least one API request;
- and
- enforcing the declarative policy in an IAM service performed for the tenant of the multi-tenant cloud-based IAM system.
Dependencies are inferred from the claim text.