Secure resource authorization for external identities using remote principal objects
摘要
說明書
For identity providers (IdPs) outside of cloud-based platforms and/or domains associated with data resource ownership and/or requested access, RPOs are also configurable to support IdPs, enabling managed service providers (MSPs) and CSPs that operate across cloud platforms to simplify their access management to data resources in owner domains, without duplication of their identities and increasing the security risk. In other words, the described embodiments provide for equal applicability to first party entities as well as to third party entities.
Still further, while be extensible thereto, the described embodiments do not disrupt existing authentication models such as guest-access and other models. That is, the RPO embodiments herein can be used in addition to, or in lieu of, these existing models which may still be utilized in the same platform/system to serve specific scenarios.
The additional examples and embodiments described in this Section may be applicable to examples disclosed in any other Section or subsection of this disclosure.
