Data Management for a Multi-Tenant Identity Cloud Service

A system for providing cloud based identity and access management, comprising:

• one or more hardware processors that execute instructions to:
• receive a request from an application for a resource, wherein the request comprises an operation on a resource type out of a plurality of resource types and the request specifies a tenant out of a plurality of tenants, the resource type comprising a schema, and the schema comprises a plurality of schema attributes and metadata for each of the schema attributes, the resource type comprising one of a user or a second application;
• store multiple versions of the resource type, at least a first version of the resource type comprises a first tagged schema attribute indicating a deprecated attribute with respect to a first previous version of the resource type, and at least a second version of the resource type comprises a second tagged schema attribute indicating an added attribute with respect to a second previous version of resource type, wherein the request indicates one of the multiple versions of the resource type;
• and
• in response to the request, retrieve the requested version of the resource type that comprises attributes that were added and/or does not include attributes that were deprecated.

A non-transitory computer readable medium having instructions stored thereon that, when executed by one or more processors, cause the processors to provide cloud based identity management, the providing comprising:

• receiving a request from an application for a resource, wherein the request comprises an operation on a resource type out of a plurality of resource types and the request specifies a tenant out of a plurality of tenants, the resource type comprising a schema, and the schema comprises a plurality of schema attributes and metadata for each of the schema attributes, the resource type comprising one of a user or a second application;
• storing multiple versions of the resource type, at least a first version of the resource type comprises a first tagged schema attribute indicating a deprecated attribute with respect to a first previous version of the resource type, and at least a second version of the resource type comprises a second tagged schema attribute indicating an added attribute with respect to a second previous version of resource type, wherein the request indicates one of the multiple versions of the resource type;
• and
• in response to the request, retrieving the requested version of the resource type that comprises attributes that were added and/or does not include attributes that were deprecated.