SYSTEMS AND METHODS FOR ISOLATING APPLICATIONS ASSOCIATED WITH MULTIPLE TENANTS WITHIN A COMPUTING PLATFORM

    公开(公告)号:US20200259923A1

    公开(公告)日:2020-08-13

    申请号:US16545073

    申请日:2019-08-20

    IPC分类号: H04L29/08 G06F9/48

    摘要: Systems and methods for isolating applications associated with multiple tenants within a computing platform receive a request from a client associated with a tenant for running an application on a computing platform. Hosts connected to the platform are associated with a network address and configured to run applications associated with multiple tenants. A host is identified based at least in part on the request. One or more broadcast domain(s) including the identified hosts are generated. The broadcast domains are isolated in the network at a data link layer. A unique tenant identification number corresponding to the tenant is assigned to the broadcast domains. In response to launching the application on the host: the unique tenant identification number is assigned to the launched application and is added to the network address of the host; and the network address of the host is sent to the client associated with the tenant.

    SYSTEMS AND METHOD FOR AUTHENTICATING USERS OF A DATA PROCESSING PLATFORM FROM MULTIPLE IDENTITY PROVIDERS

    公开(公告)号:US20210112065A1

    公开(公告)日:2021-04-15

    申请号:US16662466

    申请日:2019-10-24

    IPC分类号: H04L29/06

    摘要: A system and method for authenticating users of a data processing platform stores a mapping of a unique user platform identifier to multiple user identity provider identifiers associated with multiple realms for a same user. In some examples, the method includes receiving a request from a client device to establish an access session to perform one or more actions on data of the data processing platform and receiving, from at least one of the first external identity provider of the first realm or the second external identity provider of the second realm, a user identity provider identifier associated with the request. In certain examples, the method includes granting permission to perform the one or more actions on the data of the data processing platform based at least in part on the received user identity provider identifier.

    SYSTEMS AND METHOD FOR AUTHENTICATING USERS OF A DATA PROCESSING PLATFORM FROM MULTIPLE IDENTITY PROVIDERS

    公开(公告)号:US20220201001A1

    公开(公告)日:2022-06-23

    申请号:US17693780

    申请日:2022-03-14

    IPC分类号: H04L9/40

    摘要: A system and method for authenticating users of a data processing platform stores a mapping of a unique user platform identifier to multiple user identity provider identifiers associated with multiple realms for a same user. In some examples, the method includes receiving a request from a client device to establish an access session to perform one or more actions on data of the data processing platform and receiving, from at least one of the first external identity provider of the first realm or the second external identity provider of the second realm, a user identity provider identifier associated with the request. In certain examples, the method includes granting permission to perform the one or more actions on the data of the data processing platform based at least in part on the received user identity provider identifier.

    SYSTEMS AND METHODS FOR ISOLATING APPLICATIONS ASSOCIATED WITH MULTIPLE TENANTS WITHIN A COMPUTING PLATFORM

    公开(公告)号:US20210067603A1

    公开(公告)日:2021-03-04

    申请号:US17097389

    申请日:2020-11-13

    IPC分类号: H04L29/08 G06F9/48

    摘要: Systems and methods for isolating applications associated with multiple tenants within a computing platform receive a request from a client associated with a tenant for running an application on a computing platform. Hosts connected to the platform are associated with a network address and configured to run applications associated with multiple tenants. A host is identified based at least in part on the request. One or more broadcast domain(s) including the identified hosts are generated. The broadcast domains are isolated in the network at a data link layer. A unique tenant identification number corresponding to the tenant is assigned to the broadcast domains. In response to launching the application on the host: the unique tenant identification number is assigned to the launched application and is added to the network address of the host; and the network address of the host is sent to the client associated with the tenant.