International Business Machines Corporation

Girish B Verma

Joseph M Dennis

Provided are techniques for combining existing identity management information from multiple Identity Manager (IM) nodes. The combined information from the multiple IM nodes is presented. A provisioning request to change the identity management information is received. The provisioning request is decomposed to form multiple, separate sub-requests. One or more IM nodes are identified to process the sub-requests. The sub-requests are issued to the one or more IM nodes in parallel. A status of each of the sub-requests is received from each of the one or more IM nodes that is processing that sub-request. The received statuses are combined. The combined statuses are returned as a status of the provisioning request.

Distributed topology enabler for identity manager

A technique for identity service management in a computing environment having a plurality of managed endpoints includes a mediator located within the computing environment and remote from an identity management service provider located external to the computing environment to enable management of the plurality of managed endpoints by the identity management service provider. The mediator includes a service manager configured to authenticate the mediator to the managed endpoints and configure the managed endpoints for pulling data from the managed endpoints. The mediator also includes a data exporter configured to export the data by the mediator to the identity management service provider in response to detecting a direct connection between the mediator and the identity management service provider.

Identity service management in limited connectivity environments

A method and technique for identity service management in a computing environment having a plurality of managed endpoints includes a mediator located remote from an identity management service provider and configured to interface with the plurality of managed endpoints to enable management thereof by the identity management service provider. The mediator includes a web services client configured to package and upload data from at least one of the managed endpoints to the identity management service provider via a web services protocol. The mediator also includes a plurality of providers each configured to identify a particular type of adapter of the mediator for communicating with a respective managed endpoint.

A system and technique for identity service management in a computing environment having a plurality of managed endpoints includes a mediator located remote from an identity management service provider and configured to interface with the plurality of managed endpoints to enable management thereof by the identity management service provider. The mediator includes a web services client configured to package and upload data from at least one of the managed endpoints to the identity management service provider via a web services protocol. The mediator also includes a plurality of providers each configured to identify a particular type of adapter of the mediator for communicating with a respective managed endpoint.

A method and technique for identity service management in limited connectivity environments is disclosed. The technique includes: providing a mediator between an identity management service provider and managed endpoints of a computing environment, the mediator comprising adapters for interfacing with the managed endpoints; extracting account data, by the mediator, from the managed endpoints; storing the extracted data, by the mediator, when a direct connection between the mediator and the identity management service provider is unavailable; and exporting the stored data to the identity management service provider in response to a direct connection between the mediator and the identity management service provider becoming available.

A system and technique for identity service management in limited connectivity environments includes: a computing environment comprising a plurality of managed endpoints; and a mediator located between the computing environment and an identity management service provider. The mediator comprises adapters for interfacing with the managed endpoints, and the mediator is configured to: extract account data from the managed endpoints; store the extracted data when a direct connection between the mediator and the identity management service provider is unavailable; and export the stored data to the identity management service provider in response to a direct connection between the mediator and the identity management service provider becoming available.

Growing community of inventors

Herndon, VA, United States of America

Girish B Verma