Systems, devices, and apparatuses may be configured in various ways for authorizing access by a remote principal of a second domain to a secure data resource in a first domain. For instance, FIG. 1A and FIG. 1B will now be described. FIG. 1A shows a block diagram of a system 100A, and FIG. 1B shows a block diagram of a cloud-based system 100B, each configured for secure resource authorization of external identities using remote principal objects, according to example embodiments.
As shown in FIG. 1A, system 100A includes user(s) device(s) 116, a services platform 102, a first domain host 104, and a second domain host 106. In embodiments, user(s) device(s) 116, services platform 102, first domain host 104, and second domain host 106 communicate with each other over a network 114. It should be noted that in various embodiments different numbers of user(s) device(s), services platforms, first domain hosts, and/or second domain hosts are present. Additionally, according to embodiments, any combination of the systems and/or components illustrated in FIG. 1A are present in system 100A.
Network 114 comprises different numbers and/or types of communication links that connect devices, platforms, and hosts/servers such as, but not limited to, the Internet, wired or wireless networks and portions thereof, point-to-point connections, local area networks, enterprise networks, cloud networks, and/or the like, in embodiments.
