Patent ID: 9721117
Date: 2017-08-01
CPC Classifications: G06F,H04L

Claim:
1. A method comprising: receiving, at a first computing system of a computing infrastructure system that provides access to a plurality of services, a request by a user to access a service of the plurality of services, wherein the computing infrastructure system restricts each tenant of the computing infrastructure system to one of the plurality of services; extracting, by the first computing system, a tenant name and a service name of the service from a combined name included in the request; authenticating, by the first computing system, the user by requesting a second computing system to determine whether the user is a member of a tenant having the tenant name in the second computing system, wherein the second computing system is different from the first computing system; upon successfully authenticating that the user is the member of the tenant, accessing a directory of the second computing system to identify a set of roles that is both associated with the user and with a first service having the service name in the second computing system, wherein the first service is included in the plurality of services; based on the set of roles, determining whether the user is permitted to perform an operation specified in the request relative to the service specified in the request; and enabling the user to access the first service to perform the operation upon determining that a role in the set of roles is permitted to perform the operation specified in the request.