白丝美女被狂躁免费视频网站,500av导航大全精品,yw.193.cnc爆乳尤物未满,97se亚洲综合色区,аⅴ天堂中文在线网官网

Secure resource authorization for external identities using remote principal objects

專利號
US11888856B2
公開日期
2024-01-30
申請人
Microsoft Technology Licensing, LLC（US WA Redmond）
發(fā)明人
Charles Prakash Rao Dasari; Maksym Yaryn; Debashis Choudhury; Jeffrey A Staiman
IPC分類
H04L9/40
技術(shù)領(lǐng)域
domain,principal,remote,tenant,resource,rpo,access,in,directory,data
地域： WA WA Redmond

摘要

Methods of secure resource authorization for external identities using remote principal objects are performed by systems and devices. An external entity creates a user group and defines entitlements to an owning entity's secure resource as a set of permissions for the group. An immutable access template with the permissions and an access policy for the secure resource are provided to the owning entity for approval. On approval, a remote principal object is created in the owner directory according to the permissions and access policy. A remote principal that is a group member requests access via an interface to the owner domain using external domain credentials. The identity of the remote principal is verified against the remote principal object by a token service. Verification causes generation and issuance of a token, with the enumerated entitlements, to the remote principal interface affecting a redirect for access to the secure resource.

說明書

In an embodiment, the method includes, prior to said generating the data structure, receiving a task request from the first domain, wherein the access requirement to the secure data resource is associated with the task request and a task of the task request includes an operation required on the secure data resource, and causing a removal of the set of permissions and the access policy at the domain host for the first domain based on a completion indication for the task.

In an embodiment, the method includes, prior to said generating the data structure, receiving a task request from the first domain, the access requirement to the secure data resource being associated with the task request, the indication of the acceptance being included in the task request, and a task of the task request includes an operation required on the secure data resource.

權(quán)利要求

1
微信群二維碼
意見反饋