A computing system comprising: a plurality of devices; and an identity and access manager, IAM, ; wherein a first device of the plurality of devices, wherein the first device does not store any user configuration information, is configured, in response to the first device receiving a first request from a given user to login to the first device, to: generate a virtual user to mimic the existence of the given user on the first device, prior to verifying the existence of the given user on the first device; and send a second request corresponding to the given user to the IAM, wherein the second request comprises a request for verification of both the existence of the given user for the first device and an authorization of use by the given user for the first device; wherein in response to receiving from the IAM an indication that the given user is an authorized user of the first device, the first device is configured to create a session for the given user with privileges determined by user role information received from the IAM, wherein creating a session for the given user comprises updating or replacing information associated with the virtual user in order to transform the virtual user into the given user. a plurality of devices; and an identity and access manager, IAM, ; wherein a first device of the plurality of devices, wherein the first device does not store any user configuration information, is configured, in response to the first device receiving a first request from a given user to login to the first device, to: generate a virtual user to mimic the existence of the given user on the first device, prior to verifying the existence of the given user on the first device; and send a second request corresponding to the given user to the IAM, wherein the second request comprises a request for verification of both the existence of the given user for the first device and an authorization of use by the given user for the first device; wherein in response to receiving from the IAM an indication that the given user is an authorized user of the first device, the first device is configured to create a session for the given user with privileges determined by user role information received from the IAM, wherein creating a session for the given user comprises updating or replacing information associated with the virtual user in order to transform the virtual user into the given user. generate a virtual user to mimic the existence of the given user on the first device, prior to verifying the existence of the given user on the first device; and send a second request corresponding to the given user to the IAM, wherein the second request comprises a request for verification of both the existence of the given user for the first device and an authorization of use by the given user for the first device; wherein in response to receiving from the IAM an indication that the given user is an authorized user of the first device, the first device is configured to create a session for the given user with privileges determined by user role information received from the IAM, wherein creating a session for the given user comprises updating or replacing information associated with the virtual user in order to transform the virtual user into the given user. <EOS>