Oracle International Corporation

Martinus Petrus Lambertus Van Den Dungen

Girish Nagaraja

Gregg Alan Wilson

Arsalan Ahmad

Lokesh Gupta

Nikhil Yograj Vaishnavi

Venkata S Evani

Ghazanfar Ahmed

James William Salmon

Nagaraj Pattar

Gary P Cole

Ashok Kumar Subbaiyan

Shobhank Sharma

Kranthi Kiran Pandiri

Taoran Li

Robert Lee Tesch, Ii

Venkata Subbarao Evani

Greg Wilson

An approach of performing data center failover using an address that indicates a backup data center. The address includes common names indicating a data center with a domain and a backup datacenter with a replica of the domain. A cloud service provider can receive the address, establish a connection with an available data center, and failover to the backup data center if the data center with the connection becomes unavailable.

Failover of domains

A system for providing login to a network of a cloud service provider via more than one region is described herein. For example, the system and approaches may store authentication information in multiple regions allowing for authentication in the multiple regions.

Multi-region login

Systems and methods for single sign-on between two independent systems are disclosed herein. The method can include receiving a request to access a first application of a first system having a first login protocol. The method can include receiving user login credentials and authenticating the user login credentials. The method can include logging the user in to the first system and a second system based on the received login credentials. The second system can have a second login protocol independent of the first login protocol.

Single sign-on between 2 independent states

Approaches of reassigning a home region from a first data center to a second data center as requested by a customer are described herein. The home region is able to implement write operations to a domain, whereas other data centers cannot implement write operations to the domain. The customer can request the home region being reassigned to another data center such that the customer can utilize the other data center to implement write operations to the domain.

Home region switch

An identity management and authorization system (IMAS) receives a request to download an application to a user device associated with a user. The IMAS downloads, to the user device, a template application instance corresponding to the requested application, the template application instance having a reduced functionality than the requested application. The IMAS receives, from the user device, a request to register to the downloaded template. Responsive to receiving the request to register the application, the IMAS causes the template application instance on the user device to transition to an application instance of the application with full functionality, generates an application instance-specific credential for the application instance, associates the generated application instance-specific credential with the application instance, and stores the application instance-specific credential in association with (1) an application identifier identifying the application instance, (2) a user identifier identifying the user, and (3) a user device identifier identifying the user device.

Techniques for dynamically assigning client credentials to an application

Techniques are disclosed for unifying a first identity management service with a second identity management service within a distributed computing system. The first identity management service can receive a request to perform an entity operation. The request may be formatted for an interface of the first identity service. The first identity service can determine that the account is in a second domain associated with the second identity service and transform the request to a format corresponding to an interface of the second identity service. The transformed request may be transmitted to the second identity service using an external proxy and based in part on the second domain corresponding to the second identity service.

Techniques for backwards compatibility in an identity management cloud service

Techniques for making eventual consistency cache updates deterministic. One technique includes receiving, at a control plane, a request to execute an operation on data, executing the operation on the data, creating a replication event for the operation and a replication identifier associated with the replication event, sending a response that includes a custom header having the replication identifier, receiving, at a data plane, a subsequent request to execute an operation involving the data, the subsequent request includes the replication identifier, retrieving a replication identifier for a latest replication event executed on the data plane, comparing the replication identifier from the subsequent request and the replication identifier for the latest replication event, determining the replication event associated with the replication identifier from the subsequent request has not been executed on the data plane based on the comparison, and sending a deterministic error message to the client device.

Growing community of inventors

Snohomish, WA, United States of America

Martinus Petrus Lambertus Van Den Dungen