Patent ID: 9444808
Filing Date: 2016-09-13
CPC Classification: G06F,H04L

Claim Text:
1. A method comprising, on a multitenant shared-resources system: maintaining a domain information cache, the domain information cache comprising domain information for a plurality of managed domains, wherein the plurality of managed domains are organized into a plurality of independent management hierarchies, wherein the plurality of independent management hierarchies each subsume therein one or more domains of the plurality of managed domains; wherein each domain of the plurality of managed domains comprises a collection of network objects that share a same directory-services database; wherein each management hierarchy of the plurality of independent management hierarchies defines an independent security boundary such that network objects of the one or more domains subsumed therein are not made accessible to network objects of any other management hierarchy of the plurality of independent management hierarchies; receiving credentials from a client system, the credentials corresponding to a user of the client system; storing the credentials in a security cookie; extracting a domain-relevant portion from the credentials; based, at least in part, on a search of the domain information cache, identifying a directory level of a particular management hierarchy of the plurality of independent management hierarchies that defines a security boundary for the user; ascertaining a catalog server for the identified directory level; retrieving user-identification information from the catalog server; parsing the user-identification information to yield a domain of the user; authenticating, using the credentials, an identity of the user with an authentication server associated with the domain of the user; responsive to successful authentication: