Microsoft Technology Licensing, LLC

Jeffrey Alexander Staiman

Charles Prakash Rao Dasari

Maksym Yaryn

Debashis Choudhury

Mark Wahl

Keith S Brintzenhofe

Marck R Robinson

Zoltan Pekic

Sreenivas Narayana Simhadri

Roland A Borges

Haris Farhan Mohammad

Christopher Andrew Syers

Vishwa Shobhit Sahay

Methods of secure resource authorization for external identities using remote principal objects are performed by systems and devices. An external entity creates a user group and defines entitlements to an owning entity's secure resource as a set of permissions for the group. An immutable access template with the permissions and an access policy for the secure resource are provided to the owning entity for approval. On approval, a remote principal object is created in the owner directory according to the permissions and access policy. A remote principal that is a group member requests access via an interface to the owner domain using external domain credentials. The identity of the remote principal is verified against the remote principal object by a token service. Verification causes generation and issuance of a token, with the enumerated entitlements, to the remote principal interface affecting a redirect for access to the secure resource.

Secure resource authorization for external identities using remote principal objects

A feedback service for use with a cloud application and a method of the feedback service are disclosed. The feedback service is coupled to a page of the cloud application. A pane of the feedback service is selectively displayed with the page, and the pane requests user input regarding the page.

Feedback service in cloud application

An entitlement management system is described herein that models each entitlement as a resource within a resource management system. In a resource management system that applies policy to all requests to create, update, and delete a resource, this approach allows rich application of policy to the creation, delegation, renewal, expiration, and deletion of entitlements. A resource management system that can synchronize data to connected systems can thereby grant or revoke these permissions in those systems. This approach also facilitates role mining, attestation, and compliance reporting. Entitlements stored as resources may also include properties, such as workflows and policies related to the entitlements. Thus, the entitlement management system provides a more formal and automated facility for managing entitlements in organizations.

Entitlement lifecycle management in a resource management system

Growing community of inventors

Bellevue, WA, United States of America

Jeffrey Alexander Staiman