Providing authorization and authentication in a cloud for a user of a storage array

An apparatus for providing authorization and authentication in a cloud for a user of a storage array, the apparatus comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:

• receiving, by a cloud-based security module from a client-side array services module, user credentials;
• authenticating, by the cloud-based security module, the user credentials;
• identifying, by the cloud-based security module, authorized access privileges defining one or more storage array services accessible by the user;
• generating, by the cloud-based security module, a token representing the authentication of the user credentials and the authorized access privileges;
• and
• providing, by the cloud-based security module to the client-side array services module, the token.

A computer program product for providing authorization and authentication in a cloud for a user of a storage array, the computer program product disposed upon a computer readable medium, the computer program product comprising computer program instructions that, when executed, cause a computer to carry out the steps of:

• receiving, by a cloud-based security module from a client-side array services module, user credentials;
• authenticating, by the cloud-based security module, the user credentials;
• identifying, by the cloud-based security module, authorized access privileges defining one or more storage array services accessible by the user;
• generating, by the cloud-based security module, a token representing the authentication of the user credentials and the authorized access privileges;
• and
• providing, by the cloud-based security module to the client-side array services module, the token.