A computer implemented method for authorizing individuals of a plurality of enterprises to access one or more services provided by a plurality of service providers, the method comprising: creating, by an administrator of each of the plurality of enterprises and via a Common Authorized Management, CAM, service, a plurality of groups to contain one or more individuals at one of the plurality of an enterprises; providing, by an individual of the individuals of the plurality of enterprises, a userID, password, and information regarding a target service provider of the plurality of service providers; authenticating, by a Security Assertion Markup Language, SAML, capable authentication service, AS, the userID and password; forwarding to the CAM service, by the AS, the authenticated user ID and the information regarding the target service provider; receiving security data in the CAM service, from a plurality of service providers, wherein the security data is defined and provided by an associated service provider administrator at each of the plurality of service providers, and the security data identifies which of the one or more services provided by each of the plurality of service providers is available to each of the plurality of enterprises; determining, by the administrator of each of the plurality of enterprises and via the CAM service, a subset of the security data that is available for access by a subset of the plurality of groups; and receiving security data in the CAM service from the service providers; associating, by the administrator of each of the plurality of enterprises via the CAM service, a subset of the plurality of groups of individuals at the plurality of enterprises with a subset of the security data received from the plurality of service providers; and redirecting by the AS of a browser of the individual to the target service provider's browser with an SAML assertion comprising information regarding the access right of the individual to the service. creating, by an administrator of each of the plurality of enterprises and via a Common Authorized Management, CAM, service, a plurality of groups to contain one or more individuals at one of the plurality of an enterprises; providing, by an individual of the individuals of the plurality of enterprises, a userID, password, and information regarding a target service provider of the plurality of service providers; authenticating, by a Security Assertion Markup Language, SAML, capable authentication service, AS, the userID and password; forwarding to the CAM service, by the AS, the authenticated user ID and the information regarding the target service provider; receiving security data in the CAM service, from a plurality of service providers, wherein the security data is defined and provided by an associated service provider administrator at each of the plurality of service providers, and the security data identifies which of the one or more services provided by each of the plurality of service providers is available to each of the plurality of enterprises; determining, by the administrator of each of the plurality of enterprises and via the CAM service, a subset of the security data that is available for access by a subset of the plurality of groups; and receiving security data in the CAM service from the service providers; associating, by the administrator of each of the plurality of enterprises via the CAM service, a subset of the plurality of groups of individuals at the plurality of enterprises with a subset of the security data received from the plurality of service providers; and redirecting by the AS of a browser of the individual to the target service provider's browser with an SAML assertion comprising information regarding the access right of the individual to the service.