Microsoft Technology Licensing, LLC

Salesforce Com, Inc.

Salesforce, Inc.

Yifan Wang

Vishal Agarwal

John Michael Sheehan

Octavian Tony Ureche

Jonathan D Schwartz

Peter W Wieland

Peter J Torr

Giridharan Sridharan

Christopher Leonard Walstad

Benjamin Scott McGregor

Kumar Rajeev

Karanbir Singh

Dylan D'Silva

Jagadeesh Kunda

Aleksandr Radutskiy

Aman Gulati

Kamran Riaz Khan

Sainath Narendranath Thadkal

Ariel Anant Chavan

Matthew Gonzalez

Xuan Tao

Qian Han

Dongming Bi

A cloud infrastructure performs governance and security control for datacenters on a cloud platform. The system specifies one or more session policies for the plurality of datacenters. A session policy associated with a datacenter specifies a set of access conditions for accessing the entities of the datacenter, and may be generated based at least on the network information in the declarative specification for the datacenter, and network artifacts from provisioning the network resources for the datacenter. Responsive to receiving a request to access an entity of a datacenter from a user, the system obtains credentials for the user and attaches the session policies. Responsive to determining that the credentials are used to access the datacenter from a set of access conditions that match the set of access conditions in the attached session policy, the cloud platform grants access.

Governance and security control for services executing on cloud platforms

Techniques are disclosed relating to generating authentication information independent of user input. In some embodiments, an authentication application repeatedly performs operations to authenticate a client application to one or more hosts of a server system during an automated tasks. In some such embodiments, an instance of the operations includes receiving, from the client application, a request to generate authentication information. In response to the request, the authentication application may retrieve authentication data for the user and, independent of user input, generate an item of authentication information based on the authentication data. The authentication application may then output the item of authentication information to the client application, where the item of authentication information is usable by the client application to authenticate to at least one of the one or more hosts.

Generating authentication information independent of user input

Various systems and methods for capability access management are disclosed herein. In one example, a system includes a memory and a processor to send a signed custom capability description (SCCD) received from a first vendor to the memory for storage. The system may send an application received from a second vendor to the memory for storage. The system attempts to match the application to an authorization listing of the SCCD, where the application can be modified to allow access to a previously inaccessible custom capability in response to the application matching the authorization listing of the SCCD.

Capability access management

Single sign-on techniques via an application or browser are described. In one or more implementations, a single instance of entry of authentication information is received that is entered via interaction with an application or browser of a computing device. Responsive to this receipt, the single instance of the entry of authentication information is used by the computing device automatically and without user intervention to cause authentication to obtain access to one or more network services that are accessible via a network by the application and the browser.

Single sign-on via application or browser

Growing community of inventors

Bothell, WA, United States of America

Yifan Wang