Microsoft Technology Licensing, LLC

Daniel Kershaw

Malcolm Erik Pearson

Madan R Appiah

Yordan Ivanov Rouskov

Murli D Satagopan

Anthony Christopher Bloesch

James Charles Kleewein

Titus Constantin Miron

Anand Ramakrishna

Eugene (John) Neystadt

Vikrant Arora

Oleg Ananiev

Robert McKee Howard

Daniel Herron

Dmitry Pugachev

Asaf Kariv

Sriram Dhanasekaran

Yina Arenas

Jon Rosenberg

Eli Tovbeyn

Marek Rycharski

Vijaya Manohararaj

Network services may include data associated with one or more entities. An aggregator service may host respective application programming interfaces (APIs) of the services at a single endpoint of the network such that the entities, including associations and relationships between entities, may be federated. For example, the services may register the entities of which the data of each of the services is associated with through a declarative entity model to establish an API schema for each of the services, which may be published at the aggregator service. In response to receipt of a request for entity related data from a client, the aggregator service may employ the declarative entity model to determine which of the services are associated with the entity related data such that a query may be submitted to the services, and how to aggregate responses to the query received from the services for transmission to the client.

Aggregation and federation of distributed service entities and associations

Systems, methods and apparatus for accessing at least one resource hosted by at least one server of a cloud service provider. In some embodiments, a client computer sends authentication information associated with a user of the client computer and a statement of health regarding the client computer to an access control gateway deployed in an enterprise's managed network. The access control gateway authenticates the user and determines whether the user is authorized to access the at least one resource hosted in the cloud. If the user authentication and authorization succeeds, the access control gateway requests a security token from a security token service trusted by an access control component in the cloud and forwards the security token to the client computer. The client computer sends the security token to the access component in the cloud to access the at least one resource from the at least one server.

Flexible end-point compliance and strong authentication for distributed hybrid enterprises

Embodiments disclosed herein extend to the use of administrative roles in a multi-tenant environment. The administrative roles define administrative tasks defining privileged operations that may be performed on the resources or data of a particular tenant. In some embodiments, the administrative tasks are a subset of administrative tasks. The administrative role also defines target objects which may be subjected to the administrative tasks. In some embodiments, the target objects are a subset of target objects. An administrator may associate a user or group of users of the particular tenant with a given administrative role. In this way, the user or group of users are delegated permission to perform the subset of administrative tasks on the subset of target objects without having to be given permission to perform all administrative tasks on all target objects.

Role based delegated administration model

Embodiments disclosed herein extend to the use of external access objects in a multi-tenant environment. First and second tenants contract for operations that users of the second tenant will perform in the first tenant. Identity criteria for the users are determined. These users are mapped to an external access object that represents the second tenant users when performing the operations in the first tenant. The external access object is also associated with the resources and/or data that the users of the second tenant will be allowed access to when performing the operations. The users of the second tenant provide a request for access to the resources and/or data to perform operations. Identity criteria are determined and the users are mapped to an external access object based on the identity criteria. It is determined if the user has permission to access the resources and/or data and perform the operations.

External access and partner delegation

One aspect of the present invention relates to simulating an interaction between a client and a server. A session is established between the client and the server to conduct a test. Testing data is transmitted from the client to the server. The server processes the testing data and provides an in-band signal indicative of a response based on the testing data. The server also provides an out-of-band signal indicative of testing synchronization information related to the test.

Method for testing a speech server

Growing community of inventors

Mercer Island, WA, United States of America

Daniel Kershaw