Querying and configuring an identity management framework

1. A method, comprising operations of:

receiving a first query from a user of a client device connected to a network for a system, wherein the first query seeks information as to identity types supported by the system;

responding to the first query with a list of supported identity types, wherein the supported identity types include at least a hardware device, a role, and a user identity type and wherein the list is retrieved from a global configuration data structure in a global data store that is separate from any data stores associated with an identity type;

receiving a second query from the user for identities of the hardware devices associated with one of the supported identity types; and

responding to the second query with the identity of a specific hardware device, if the user is permitted to access the specific hardware device according to permissions obtained through the global configuration data structure, and further comprising,

receiving a third query from the user for connection configurations for the specific hardware device;

determining that the connection configurations are partially available in the global configuration data structure;

retrieving over the network at least one connection configuration from the specific hardware device, using a plugin associated with the specific hardware device; and

responding to the third query with the at least one retrieved connection configuration, if the user is permitted to use the retrieved connection configuration according to permissions obtained through the global configuration data structure, wherein each operation of the method is executed by one or more processors.

2. The method of claim 1 , further comprising operations of:

receiving a fourth query from the user for supported operations of the specific hardware device;

determining that the supported operations are partially available in the global configuration data structure;

retrieving over the network at least one supported operation from the specific hardware device, using a plugin associated with the specific hardware device; and

responding to the fourth query with the retrieved supported operation, if the user is permitted to perform the retrieved supported operation on the specific hardware device according to permissions obtained through the global configuration data structure.

3. The method of claim 1 , further comprising an operation of:

responding to the third query with a supported operation stored in the global configuration data structure.

4. The method of claim 3 , further comprising an operation of:

storing the at least one retrieved supported operation in the global configuration data structure.

5. The method of claim 1 , further comprising an operation of:

responding to the third query with a connection configuration stored in the global configuration data structure.

6. The method of claim 1 , further comprising an operation of:

storing the at least one retrieved connection configuration in the global configuration data structure.

7. One or more non-transitory computer-readable media persistently storing instructions that, when executed by a processor, perform the following operations:

receive a first query from a user of a client device connected to a network for a system, wherein the first query seeks information as to identity types supported by the system;

respond to the first query with a list of supported identity types, wherein the supported identity types include at least a hardware device, a role, and a user identity type and wherein the list is retrieved from a global configuration data structure in a global data store that is separate from any data stores associated with an identity type;

receive a second query from the user for identities of the hardware devices associated with one of the supported identity types; and

respond to the second query with the identity of a specific hardware device, if the user is permitted to access the specific hardware device according to permissions obtained through the global configuration data structure, and further comprising,

receive a third query from the user for connection configurations for the specific hardware device;

determine that the connection configurations are partially available in the global configuration data structure;

retrieve over the network at least one connection configuration from the specific hardware device, using a plugin associated with the specific hardware device; and

respond to the third query with the at least one retrieved connection configuration, if the user is permitted to use the retrieved connection configuration according to permissions obtained through the global configuration data structure.

8. The one or more non-transitory computer-readable media of claim 7 , further comprising operations of:

receive a fourth query from the user for supported operations of the specific hardware device;

determine that the supported operations are partially available in the global configuration data structure;

retrieve over the network at least one supported operation from the specific hardware device, using a plugin associated with the specific hardware device; and

respond to the fourth query with the retrieved supported operation, if the user is permitted to perform the retrieved supported operation on the specific hardware device according to permissions obtained through the global configuration data structure.

9. The one or more non-transitory computer-readable media of claim 7 , further comprising an operation of:

respond to the third query with a supported operation stored in the global configuration data structure.

10. The one or more non-transitory computer-readable media of claim 8 , further comprising an operation of:

store the at least one retrieved supported operation in the global configuration data structure.

11. The one or more non-transitory computer-readable media of claim 8 , further comprising an operation of:

respond to the third query with a connection configuration stored in the global configuration data structure.

12. The one more non-transitory computer-readable media of claim 8 , further comprising an operation of:

store the at least one retrieved connection configuration in the global configuration data structure.

13. A method, comprising operations of:

receiving a first query from a user of a client device connected to a network for a system, wherein the first query seeks information as to identity types supported by the system;

responding to the first query with a list of supported identity types, wherein the supported identity types include an identity type for a hardware device and wherein the list is retrieved from a global configuration data structure in a global data store that is separate from any data stores associated with an identity type;

receiving a second query from the user for identities of the hardware devices associated with the identity type for the hardware device; and

responding to the second query with the identity of a specific hardware device, if the user is permitted to access the specific hardware device according to permissions obtained through the global configuration data structure, and further comprising,

receiving a third query from the user for connection configurations for the specific hardware device;

determining that the connection configurations are partially available in the global configuration data structure;

retrieving over the network at least one connection configuration from the specific hardware device, using a plugin associated with the specific hardware device and storing the at least one retrieved connection configuration in the global configuration data structure; and

responding to the third query with the at least one retrieved connection configuration, if the user is permitted to use the retrieved connection configuration according to permissions obtained through the global configuration data structure, wherein each operation of the method is executed by one or more processors.

14. The method of claim 13 , further comprising operations of:

receiving a fourth query from the user for supported operations of the specific hardware device;

determining that the supported operations are partially available in the global configuration data structure;

retrieving over the network at least one supported operation from the specific hardware device, using a plugin associated with the specific hardware device; and

responding to the fourth query with the retrieved supported operation, if the user is permitted to perform the retrieved supported operation on the specific hardware device according to permissions obtained through the global configuration data structure.

15. The method of claim 13 , further comprising an operation of:

responding to the third query with a supported operation stored in the global configuration data structure.

16. The method of claim 13 , further comprising an operation of:

storing the at least one retrieved supported operation in the global configuration data structure.

17. The method of claim 13 , further comprising an operation of;

responding to the third query with a connection configuration stored in the global configuration data structure.