Framework for token exchange between different cloud environments

One or more computer readable non-transitory media storing computer-executable instructions that, when executed by one or more processors, cause:

• receiving, by a multi-cloud infrastructure included in a first cloud environment provided by a first cloud services provider (CSP), a first request from a user associated with an account in a second cloud environment provided by a second CSP, the first request requesting use of a service provided by the first cloud environment and including a first token issued by the second CSP;
• obtaining, by the multi-cloud infrastructure, a second token issued by the first CSP based on validating the first token with respect to a trust configuration corresponding to the second CSP, the trust configuration being previously generated and maintained by the first CSP in the first cloud environment;
• and
• transmitting, by the multi-cloud infrastructure, the second token to the service, wherein the second token enables the user to utilize the service provided by the first cloud environment.

A computing device comprising:

• one or more processors;
• and
• a memory including instructions that, when executed with the one or more processors, cause the computing device to, at least:
• receive, by a multi-cloud infrastructure included in a first cloud environment provided by a first cloud services provider (CSP), a first request from a user associated with an account in a second cloud environment provided by a second CSP, the first request requesting use of a service provided by the first cloud environment and including a first token issued by the second CSP;
• obtain, by the multi-cloud infrastructure, a second token issued by the first CSP based on validating the first token with respect to a trust configuration corresponding to the second CSP, the trust configuration being previously generated and maintained by the first CSP in the first cloud environment;
• and
• transmit, by the multi-cloud infrastructure, the second token to the service, wherein the second token enables the user to utilize the service provided by the first cloud environment.