Patent ID: 8156516
Filing Date: 2012-04-10
Classification: G06F

Abstract:
1. A method implemented in a non-transitory machine-readable medium and to execute on a machine, comprising: authenticating, by the machine, a virtualized federated role provisioning service by using a specialized service that is preconfigured to communicate with a local identity service within a local environment and supply a temporary access token that was supplied by a remote identity service, the local identity service validates the temporary access token with the remote identity service and validates a signature for a configuration of the virtualized federated role provisioning service and the remote identity service then supplies a permanent identity for the virtualized federated role provisioning service to use within the local environment; initiating, by the machine, the virtualized federated role provisioning service as a virtual machine that acts as policy decision point service for the local environment; and processing, by the machine, the virtual machine within the local environment to dynamically supply policy for role assignments of resources, the virtual machine independent processes without any additional assistance within the local environment when it is subsequently initiated as the virtual machine and processed and represents a self-contained and encapsulated execution and content environment for the local environment.