A non-transitory computer readable medium having instructions stored thereon that, when executed by a processor, cause the processor to provide cloud-based identity and access management, the providing comprising: receiving a first request for an identity management service configured to allow for accessing an application; sending the first request to a first microservice, wherein: the first microservice performs the identity management service by generating a token, the first microservice being configured to provide an authentication functionality based on a protocol, wherein the token corresponds to said protocol, the first microservice generates the token at least in part by sending a second request to a single sign-on (SSO) microservice, wherein the second request comprises request parameters which are normalized, such that the SSO microservice does not need to know specific protocol semantics of said protocol, the SSO microservice is configured to provide a common single sign-on functionality across different microservices that are configured to provide an authentication functionality based on a plurality of different protocols including said protocol the SSO microservice generates a global session configured as a session cookie and provides the global session to the first microservice; receiving the token from the first microservice; and providing the token to the application, wherein the token allows for accessing the application. receiving a first request for an identity management service configured to allow for accessing an application; sending the first request to a first microservice, wherein: the first microservice performs the identity management service by generating a token, the first microservice being configured to provide an authentication functionality based on a protocol, wherein the token corresponds to said protocol, the first microservice generates the token at least in part by sending a second request to a single sign-on (SSO) microservice, wherein the second request comprises request parameters which are normalized, such that the SSO microservice does not need to know specific protocol semantics of said protocol, the SSO microservice is configured to provide a common single sign-on functionality across different microservices that are configured to provide an authentication functionality based on a plurality of different protocols including said protocol the SSO microservice generates a global session configured as a session cookie and provides the global session to the first microservice; the first microservice performs the identity management service by generating a token, the first microservice being configured to provide an authentication functionality based on a protocol, wherein the token corresponds to said protocol, the first microservice generates the token at least in part by sending a second request to a single sign-on (SSO) microservice, wherein the second request comprises request parameters which are normalized, such that the SSO microservice does not need to know specific protocol semantics of said protocol, the SSO microservice is configured to provide a common single sign-on functionality across different microservices that are configured to provide an authentication functionality based on a plurality of different protocols including said protocol the SSO microservice generates a global session configured as a session cookie and provides the global session to the first microservice; receiving the token from the first microservice; and providing the token to the application, wherein the token allows for accessing the application. <EOS>