Systems and methods for correlated access insights and group reporting

1 . A method utilizing a groups service integrated within an Identity and Access Management (IAM) system executing on a processor to provide scalable and customizable group-level reporting based on dynamic user-defined attributes, the method comprising:

providing, by the groups service, a user interface of the groups service on a user device, the user interface comprising a group settings page configured to receive a user selection of arbitrary metadata fields that are unique per integration within the IAM system to define custom grouping criteria;

receiving, by the groups service through the group settings page on the user device, a selection of a metadata field;

responsive to the selection of the metadata field, starting, by the groups service, a group sync process which fetches a usage history from a usage database, the usage history containing user information, the user information comprising user activity data;

determining, by the groups service based on the metadata field selected from the group settings page and the usage history from the usage database, properties of end users of an enterprise accessing a software product on an integrated platform integrated with the IAM system, wherein the determining includes performing a correlation calculation utilizing the dynamically selected metadata field and a count-distinct algorithm comprising a HyperLogLog algorithm to map users to groups for the integrated platform based on user activity data to yield an accurate count of distinct users over a time window by storing only one row in the usage database for each group name, software name, and date trio, thereby reducing data storage requirements;

generating, by the groups service, a plurality of groups based on the properties of the end users of the enterprise accessing the software product on the integrated platform integrated with the IAM system; and

generating, by the groups service, a group listing page containing the plurality of groups for presentation on the user device, thereby correlating complex user activity data with dynamically selected attributes to generate custom group-level access insights for identity and access management.

2 . The method according to claim 1 , further comprising:

determining, based on the usage history, timepoints of when the end users of the enterprise access the software product and group memberships of the end users.

3 . The method according to claim 2 , further comprising:

generating, by the groups service based on the timepoints, the software product, and the group memberships of the end users, a time series chart showing active and inactive users of the software product over time.

4 . The method according to claim 1 , further comprising:

receiving a selected group from the group listing page; and

generating a group value listing page containing a list of synced values for the selected group, the synced values containing vendors and applications for the selected group.

5 . The method according to claim 4 , further comprising:

receiving a selected vendor from the group value listing page; and

generating a vendor page with data for the selected group, the selected vendor, and the software product.

6 . The method according to claim 1 , wherein the count-distinct algorithm yields the accurate count of distinct users over the time window without duplicating user counts.

7 . A system utilizing a groups service integrated within an Identity and Access Management (IAM) system executing on a processor to provide scalable and customizable group-level reporting based on dynamic user-defined attributes, the system comprising:

a processor;

a non-transitory computer-readable medium; and

instructions stored on the non-transitory computer-readable medium and translatable by the processor for:

providing a user interface of a groups service on a user device, the user interface comprising a group settings page configured to receive a user selection of arbitrary metadata fields that are unique per integration within the IAM system to define custom grouping criteria;

receiving, through the group settings page on the user device, a selection of a metadata field;

responsive to the selection of the metadata field, starting a group sync process which fetches a usage history from a usage database, the usage history containing user information, the user information comprising user activity data;

determining, based on the metadata field selected from the group settings page and the usage history from the usage database, properties of end users of an enterprise accessing a software product on an integrated platform integrated with the IAM system, wherein the determining includes performing a correlation calculation utilizing the dynamically selected metadata field and a count-distinct algorithm comprising a HyperLogLog algorithm to map users to groups for the integrated platform based on user activity data to yield an accurate count of distinct users over a time window by storing only one row in the usage database for each group name, software name, and date trio, thereby reducing data storage requirements;

generating a plurality of groups based on the properties of the end users of the enterprise accessing the software product on the integrated platform integrated with the IAM system; and

generating a group listing page containing the plurality of groups for presentation on the user device, thereby correlating complex user activity data with dynamically selected attributes to generate custom group-level access insights for identity and access management.

8 . The system of claim 7 , wherein the instructions are further translatable by the processor for:

determining, based on the usage history, timepoints of when the end users of the enterprise access the software product and group memberships of the end users.

9 . The system of claim 8 , wherein the instructions are further translatable by the processor for:

generating, based on the timepoints, the software product, and the group memberships of the end users, a time series chart showing active and inactive users of the software product over time.

10 . The system of claim 7 , wherein the instructions are further translatable by the processor for:

receiving a selected group from the group listing page; and

generating a group value listing page containing a list of synced values for the selected group, the synced values containing vendors and applications for the selected group.

11 . The system of claim 10 , wherein the instructions are further translatable by the processor for:

receiving a selected vendor from the group value listing page; and

generating a vendor page with data for the selected group, the selected vendor, and the software product.

12 . The system of claim 7 , wherein the count-distinct algorithm yields the accurate count of distinct users over the time window without duplicating user counts.

13 . A computer program product for utilizing a groups service integrated within an Identity and Access Management (IAM) system to provide scalable and customizable group-level reporting based on dynamic user-defined attributes, the computer program product comprising a non-transitory computer-readable medium storing instructions translatable by a processor for:

providing a user interface of a groups service on a user device, the user interface comprising a group settings page configured to receive a user selection of arbitrary metadata fields that are unique per integration within the IAM system to define custom grouping criteria;

receiving, through the group settings page on the user device, a selection of a metadata field;

responsive to the selection of the metadata field, starting a group sync process which fetches a usage history from a usage database, the usage history containing user information, the user information comprising user activity data;

determining, based on the metadata field selected from the group settings page and the usage history from the usage database, properties of end users of an enterprise accessing a software product on an integrated platform integrated with the IAM system, wherein the determining includes performing a correlation calculation utilizing the dynamically selected metadata field and a count-distinct algorithm comprising a HyperLogLog algorithm to map users to groups for the integrated platform based on user activity data to yield an accurate count of distinct users over a time window by storing only one row in the usage database for each group name, software name, and date trio, thereby reducing data storage requirements;

generating a plurality of groups based on the properties of the end users of the enterprise accessing the software product on the integrated platform integrated with the IAM system; and

generating a group listing page containing the plurality of groups for presentation on the user device, thereby correlating complex user activity data with dynamically selected attributes to generate custom group-level access insights for identity and access management.

14 . The computer program product of claim 13 , wherein the instructions are further translatable by the processor for:

determining, based on the usage history, timepoints of when the end users of the enterprise access the software product and group memberships of the end users.

15 . The computer program product of claim 14 , wherein the instructions are further translatable by the processor for:

generating, based on the timepoints, the software product, and the group memberships of the end users, a time series chart showing active and inactive users of the software product over time.

16 . The computer program product of claim 13 , wherein the instructions are further translatable by the processor for:

receiving a selected group from the group listing page; and

generating a group value listing page containing a list of synced values for the selected group, the synced values containing vendors and applications for the selected group.

17 . The computer program product of claim 16 , wherein the instructions are further translatable by the processor for:

receiving a selected vendor from the group value listing page; and

generating a vendor page with data for the selected group, the selected vendor, and the software product.

18 . The computer program product of claim 13 , wherein the count-distinct algorithm yields the accurate count of distinct users over the time window without duplicating user counts.