Integrated hosted directory
Methods, systems, and devices for enterprise-wide management of disparate devices, applications, and users are described. A cloud-based central server may maintain an integrated hosted directory, which may allow user authentication, authorization, and management of information technology (IT) resources and/or user account information across device types, operating systems, and software-as-a-service (SaaS) and on-premises applications. User account information for multiple and separate customers may be managed from a single, central directory, and servers may be brought online to allow access to the directory according to system loading.
1. A method of multitenant directory management at a central server, comprising:
obtaining user account information for a plurality of users;
accessing a multitenant directory at the central server, wherein the multitenant directory comprises a mapping between user identities and the user account information for a plurality of services, wherein each service of the plurality of services is associated with a set of users of the plurality of users, and wherein, for a first set of users of the plurality of users, a first service is associated with a first portion of the user account information based on the mapping;
updating the mapping between user identities and the user account information, wherein, for the first set of users, a second service of the plurality of services is associated with the first portion of the user account information based on the updating;
transmitting, based on updating the mapping, at least a first portion of the multitenant directory to a first server, wherein the first portion of the multitenant directory comprises references to the first portion of the user account information for the second service; and
providing, to the first server, an indication that the first set of users has permission to access the second service based on transmitting the first portion of the multitenant directory.
2. The method of claim 1 , further comprising:
receiving a request to associate, for the first set of users, the second service with the first portion of the user account information, wherein the mapping is updated based on receiving the request.
3. The method of claim 1 , wherein the user account information comprises one or more of: user name, password, actual name, or a set of one or more user attributes.
4. The method of claim 1 , further comprising:
connecting to the first server based on updating the mapping.
5. The method of claim 4 , wherein providing the indication that the first set of users has permission to access the second service comprises:
transmitting the indication to the first server.
6. A central server, comprising:
a processor; and
a memory coupled with the processor, the memory storing code that is executable by the processor to:
obtain user account information for a plurality of users;
access a multitenant directory, wherein the multitenant directory comprises a mapping between user identities and the user account information for a plurality of services, wherein each service of the plurality of services is associated with a set of users of the plurality of users, and wherein, for a first set of users of the plurality of users, a first service is associated with a first portion of the user account information based on the mapping;
update the mapping between user identities and the user account information, wherein, for the first set of users, a second service of the plurality of services is associated with the first portion of the user account information based on the updating;
transmit, based on updating the mapping, at least a first portion of the multitenant directory to a first server, wherein the first portion of the multitenant directory comprises references to the first portion of the user account information for the second service; and
provide, to the first server, an indication that the first set of users has permission to access the second service based on transmitting the first portion of the multitenant directory.
7. The central server of claim 6 , wherein the code is further executable by the processor to:
receive a request to associate, for the first set of users, the second service with the first portion of the user account information, wherein the mapping is updated based on receiving the request.
8. The central server of claim 6 , wherein the user account information comprises one or more of: user name, password, actual name, or a set of one or more user attributes.
9. The central server of claim 6 , wherein the code is further executable by the processor to:
connect to the first server based on updating the mapping.
10. The central server of claim 9 , wherein the code executable by the processor to provide the indication that the first set of users has permission to access the second service is further executable by the processor to:
transmit the indication to the first server.
11. A central server, comprising:
means for obtaining user account information for a plurality of users;
means for accessing a multitenant directory at the central server, wherein the multitenant directory comprises a mapping between user identities and the user account information for a plurality of services, wherein each service of the plurality of services is associated with a set of users of the plurality of users, and wherein, for a first set of users of the plurality of users, a first service is associated with a first portion of the user account information based on the mapping;
means for updating the mapping between user identities and the user account information, wherein, for the first set of users, a second service of the plurality of services is associated with the first portion of the user account information based on the updating;
means for transmitting, based on updating the mapping, at least a first portion of the multitenant directory to a first server, wherein the first portion of the multitenant directory comprises references to the first portion of the user account information for the second service; and
means for providing, to the first server, an indication that the first set of users has permission to access the second service based on transmitting the first portion of the multitenant directory.
12. The central server of claim 11 , further comprising:
means for receiving a request to associate, for the first set of users, the second service with the first portion of the user account information, wherein the mapping is updated based on receiving the request.
13. The central server of claim 11 , wherein the user account information comprises one or more of: user name, password, actual name, or a set of one or more user attributes.
14. The central server of claim 11 , further comprising:
means for connecting to the first server based on updating the mapping.