Patent ID: 9742626
Date: 2017-08-22
CPC Classifications: G06F,H04L,H04W

Claim:
1. A method comprising: executing at a controller a horizontally scalable service Identity Definitions Manager (IDM) Service; mapping active directory (AD) domains to WAN network elements DNS ROLE and LDAP ROLE; instructing a plurality of network elements associated with a tenant to discover a plurality of AD domains and AD servers in an enterprise using the DNS ROLE; receiving from the plurality of network elements running DNS ROLE information indicative of changes to network attributes selected from the group consisting of AD domains, additions and subtractions of AD servers and changes in an IP address of AD servers; transmitting the received AD domains and AD servers to a tenant administrator and requesting credentials to communicate with added AD servers using LDAP; executing an algorithm to determine which element will contact specific AD instances to monitoring in Active Directory servers changes in at least one identity of a network user by using the LDAP ROLE on the network elements; and updating a policy, based at least in part on the mapping of user identity in AD domains, at a multi-tenant controller, wherein the tracking of changing identity information is implemented as a horizontally scalable service the Identity Definitions Manager Service.