A computer-implemented method comprising: creating, by a shared identity management system, a first set of identities of users that are associated with a first customer of a plurality of customers of a shared computing environment; storing, in the shared computing environment, data that specifies the first set of identities of users and associates the first set of identities of users with the first customer; associating, with the first customer, a first plurality of services available within the shared computing environment; deciding, based on the association between the first plurality of services and the first customer, by the shared identity management system, to make the first set of identities of users accessible to all services within the first plurality of services; creating, by the shared identity management system, a second set of identities of users that are associated with a second customer of the plurality of customers; storing, in the shared computing environment, data that specifies the second set of identities of users and associates the second set of identities of users with the second customer; associating, with the second customer, a second plurality of services available within the shared computing environment; and deciding, based on the association between the second plurality of services and the second customer, by the shared identity management system, to make the second set of identities of users accessible to all services within the second plurality of services; wherein the first plurality of services differs from the second plurality of services; wherein the shared identity management system provides identity management functions to services provisioned within a first domain that is dedicated to the first customer and not to the second customer; wherein the shared identity management system provides identity management functions to services provisioned within a second domain that is dedicated to the second customer and not to the first customer; wherein the first domain and second domain are domains of the shared computing environment. creating, by a shared identity management system, a first set of identities of users that are associated with a first customer of a plurality of customers of a shared computing environment; storing, in the shared computing environment, data that specifies the first set of identities of users and associates the first set of identities of users with the first customer; associating, with the first customer, a first plurality of services available within the shared computing environment; deciding, based on the association between the first plurality of services and the first customer, by the shared identity management system, to make the first set of identities of users accessible to all services within the first plurality of services; creating, by the shared identity management system, a second set of identities of users that are associated with a second customer of the plurality of customers; storing, in the shared computing environment, data that specifies the second set of identities of users and associates the second set of identities of users with the second customer; associating, with the second customer, a second plurality of services available within the shared computing environment; and deciding, based on the association between the second plurality of services and the second customer, by the shared identity management system, to make the second set of identities of users accessible to all services within the second plurality of services; wherein the first plurality of services differs from the second plurality of services; wherein the shared identity management system provides identity management functions to services provisioned within a first domain that is dedicated to the first customer and not to the second customer; wherein the shared identity management system provides identity management functions to services provisioned within a second domain that is dedicated to the second customer and not to the first customer;