Access orchestration engine in a cloud access management system

One or more computer-storage media having computer-executable instructions embodied thereon that, when executed by a computing system having a processor and memory, cause the processor to perform operations, the operations comprising:

• accessing an organization identifier of an organization, wherein the organization identifier is associated with a request to configure an organization for a consumer-identity-supported tenant environment that provides access to remote clients of the organization based on consumer identities;
• executing a first plurality of access orchestration operations to configure the consumer-identity-supported tenant environment, wherein the first plurality of access orchestration operations include:
• generating a consumer-identity-supported tenant configuration consumer-identity-supported tenant configuration that initializes the consumer-identity-supported tenant environment;
• mapping a consumer identity of a user to the consumer-identity-supported tenant environment;
• and
• assigning a license to the consumer identity in the consumer-identity-supported tenant environment;
• and
• communicating an indication that the organization is configured with the consumer-identity-supported tenant environment.

A computer-implemented method, the method comprising:

• accessing a consumer identity of a user, wherein the consumer identity is licensed for access to a consumer-identity-supported tenant environment;
• initiating a discovery operation to identify the consumer-identity-supported tenant environment associated with the consumer identity;
• based on the consumer identity, providing access to the consumer-identity-supported tenant environment;
• communicating an indication of a remote client that is accessible based on the consumer identity;
• accessing credentials associated with the consumer identity;
• and
• based on the credentials associated with the consumer identity, providing access to the remote client.