Integrating just in time federated cross-domain authentication and access with cloud side passwordless access control

A method comprising:

• carrying out a federated authentication and access process to authenticate a given user seeking access to a cloud-based application, and upon authentication, providing access to a cloud side access control process;
• and
• carrying out the cloud side access control process, wherein the cloud side access control process includes accessing, for purposes of the given client accessing an onboarded OS and associated application on a virtual machine of a target cloud platform, security settings structured data at the target platform, the security settings structured data including limitations for specifying per command access control.

A non-transitory computer readable media encoded to cause:

• carrying out a federated authentication and access process to authenticate a given user seeking access to a cloud-based application, and upon authentication, providing access to a cloud side access control process;
• and
• carrying out the cloud side access control process, wherein the cloud side access control process includes accessing, for purposes of the given client accessing an onboarded OS and associated application on a virtual machine of a target cloud platform, security settings structured data at the target platform, the security settings structured data including limitations for specifying per command access control.