Patent ID: 11930016
Assignee: MICROSOFT TECHNOLOGY LICENSING, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 19:
20. A computer system that provides a multi-tenant authorization platform for providing a target tenant computing system with access to resources of a source tenant computing system, the computer system comprising:
memory comprising a secret store that stores a secret corresponding to a client application and a target service authorization authorizing a target service to access the secret;
one or more processors configured to implement an OAuth provider having a source tenant scope, the OAuth provider configured to:
generate a client application entry in a source tenant scope of an OAuth provider having a secret corresponding to a client application and a target service authorization authorizing a target service to access the secret, the client application entry in the source tenant scope including:
a client application identifier identifying the client application,
a resource identifier that identifies a resource, served by a source tenant service corresponding to a source tenant computing system, to be accessed by the client application, and
a permissions definition that defines a permission to perform an operation on the resource; and

an authorization server coupled to the source tenant computing system, and configured to:
receive, from the target service, a request for a token authorizing access to the resource;
validate the request for the token based on a determination that the request for the token includes the secret; and
send the token to the target service based on the validation.