Patent ID: 8881252

Claim:
A system for access control management, comprising: at least one processor, and at least one memory storing instructions that, when executed by the at least one processor, cause the system to: store, by a credentialing and access control system, configuration data pertaining to access requirements for a plurality of physical resources, including a first physical resource and a second physical resource; bind, by the credentialing and access control system, required access conditions for accessing the first and second physical resources with an internal identity for at least one user and an external identity for the at least one user, with the external identity corresponding to identity and authentication information obtained by an identity provider external to the credentialing and access control system; receive, by the credentialing and access control system, identity and authentication information pertaining to the at least one user's external identity from the at least one user; and generate, for the at least one user and based on the received identity information, at least a first and a second resource token, with the first resource token permitting the at least one user to access the first physical resource and with the second resource token permitting the at least one user to access the second physical resource.