UNIFORMLY ACCESSING FEDERATED USER REGISTRY TOPOLOGIES

• US 20170295184A1
• Filed: 04/12/2016
• Published: 10/12/2017
• Est. Priority Date: 04/12/2016
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Kurian, John, Mathew George, Sunil, Zunzarrao, Rohan S.
• Granted Patent: US 10,339,153 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 16/258 Data format conversion from or to a database
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

An approach for standardizing access to user registries, the approach involving providing a first schema extension to an identity management system and a bridge component to an identity management application wherein the bridge component comprises a second schema extension to the identity management application, receiving a request in a first data format associated with the identity management system, converting the request into a second data format associated with the identity management application and executing the request in the identity management application, receiving a response to the request in the second data format, converting the response into the first data format and returning the response to an end user via the identity management system.

Claims

1. A method for standardizing access to user registries, the method comprising:

providing a first schema extension to an identity management system and a bridge component to an identity management application, wherein the bridge component comprises a second schema extension to the identity management application;

receiving a request in a first data format associated with the identity management system;

converting the request into a second data format associated with the identity management application and executing the request in the identity management application;

receiving a response to the request in the second data format;

converting the response into the first data format; and

returning the response via the identity management system.

2. The method of claim 1, wherein the identity management application is a repository for communicating with one or more user registries.

3. The method of claim 2, wherein the first schema extension enables an end user to submit a request in the identity management system which is directed to a subset of the one or more user registries.

4. The method of claim 2, wherein the second schema extension enables at least one of custom configuration of the one or more user registries and additional properties to be added to at least one of user data and group data associated with the identity management application.

5. The method of claim 1, wherein converting the request comprises mapping data into an application programming interface provided by the identity management application.

6. The method of claim 1, wherein the request comprises at least one of a request for authentication, a request for a retrieval of at least one of individual user data and group data and a request to edit at least one of individual user data and group data.

7. The method of claim 1, wherein standardizing access to user registries is provided as a service in a cloud environment.

8. A computer program product for standardizing access to user registries, the computer program product comprising:

one or more computer readable storage media and program instructions stored on the one or more computer readable storage media, the program instructions comprising;

program instructions to provide a first schema extension to an identity management system and a bridge component to an identity management application, wherein the bridge component comprises a second schema extension to the identity management application;

program instructions to receive a request in a first data format associated with the identity management system;

program instructions to convert the request into a second data format associated with the identity management application and execute the request in the identity management application;

program instructions to receive a response to the request in the second data format;

program instructions to convert the response into the first data format; and

program instructions to return the response via the identity management system.

9. The computer program product of claim 8, wherein the identity management application is a repository for communicating with one or more user registries.

10. The computer program product of claim 9, wherein the first schema extension enables an end user to submit a request in the identity management system which is directed to a subset of the one or more user registries.

11. The computer program product of claim 9, wherein the second schema extension enables at least one of custom configuration of the one or more user registries and additional properties to be added to at least one of user data and group data associated with the identity management application.

12. The computer program product of claim 8, wherein the program instructions to convert the request comprise mapping data into an application programming interface provided by the identity management application.

13. The computer program product of claim 8, wherein the request comprises at least one of a request for authentication, a request for a retrieval of at least one of individual user data and group data and a request to edit at least one of individual user data and group data.

14. The computer program product of claim 8, wherein standardizing access to user registries is provided as a service in a cloud environment.

15. A computer system for standardizing access to user registries, the computer system comprising:

one or more computer processors;

one or more computer readable storage media;

program instructions stored on the one or more computer readable storage media for execution by at least one of the one or more processors, the program instructions comprising;

program instructions to provide a first schema extension to an identity management system and a bridge component to an identity management application, wherein the bridge component comprises a second schema extension to the identity management application;

program instructions to receive a request in a first data format associated with the identity management system;

program instructions to convert the request into a second data format associated with the identity management application and execute the request in the identity management application;

program instructions to receive a response to the request in the second data format;

program instructions to convert the response into the first data format; and

program instructions to return the response via the identity management system.

16. The computer system of claim 15, wherein the identity management application is a repository for communicating with one or more user registries.

17. The computer system of claim 16, wherein the first schema extension enables an end user to submit a request in the identity management system which is directed to a subset of the one or more user registries.

18. The computer system of claim 16, wherein the second schema extension enables at least one of custom configuration of the one or more user registries and additional properties to be added to at least one of user data and group data associated with the identity management application.

19. The computer system of claim 15, wherein the program instructions to convert the request comprise mapping data into an application programming interface provided by the identity management application.

20. The computer system of claim 15, wherein standardizing access to user registries is provided as a service in a cloud environment.