Delivering authorization and authentication for a user of a storage array from a cloud

An apparatus for delivering authorization and authentication for a user of a storage array from a cloud, the apparatus comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:

• identifying, by a cloud-based security module, authorized access privileges defining one or more storage array services accessible by the user;
• generating, by the cloud-based security module, a token representing the authentication of user credentials and the authorized access privileges, including:
• hashing data representing the authorized access privileges;
• encrypting the hashed data using a public key of a storage array access module, wherein the encrypted hashed data includes the digital signature;
• and
• providing, by the cloud-based security module to the client-side array services module, the token, including sending, as the token to the storage array access module, the data representing the authorized access privileges with the digital signature.

A computer program product for delivering authorization and authentication for a user of a storage array from a cloud, the computer program product disposed upon a non-transitory computer readable medium, the computer program product comprising computer program instructions that, when executed, cause a computer to carry out the steps of:

• identifying, by a cloud-based security module, authorized access privileges defining one or more storage array services accessible by the user;
• generating, by the cloud-based security module, a token representing the authentication of user credentials and the authorized access privileges, including:
• hashing data representing the authorized access privileges;
• encrypting the hashed data using a public key of a storage array access module, wherein the encrypted hashed data includes the digital signature;
• and
• providing, by the cloud-based security module to the client-side array services module, the token, including sending, as the token to the storage array access module, the data representing the authorized access privileges with the digital signature.