Patent ID: 8769622

Claim:
A method for authentication and authorization in an environment wherein computing resources are hosted in a shared pool of configurable computing resources, comprising: receiving a request from a first entity for access to the shared pool of configurable computing resources managed by a second entity; upon execution of an agreement among the first entity, the second entity and a third entity that is distinct from the first entity and the second entity, assigning the first entity a resource group; registering a plug-in security module associated with the first entity in a plug-in service operated by the second entity in association with the shared pool of configurable computing resources; restricting access to the resource group except via the plug-in security module; upon occurrence of an event, returning the resource group to the shared pool by: issuing a request to the third party, the request seeking permission to disassociate the first entity from the resource group; and receiving a response from the third party, the response indicating that the second entity has permission to disassociate the first entity from the resource group.