Cluster claim

1. A method, comprising:

generating, by a secondary storage system, cluster state information in response to a request to establish a connection with a cloud service system, wherein the cluster state information includes a first instance of a security token;

providing, by the secondary storage system, the cluster state information to a web browser associated with a user, wherein the web browser associated with the user is redirected to a cloud identity provider, wherein the cloud identity provider authenticates the user and upon successful authentication, the cloud identify provider redirects the web browser associated with the user to the cloud service system, wherein a redirection includes the cluster state information, wherein the cluster state information that includes the first instance of the security token;

requesting, by the secondary storage system, from the cloud service system a certificate; and

providing, by the secondary storage system, to the cloud service system the cluster state information that includes a second instance of the security token, wherein the cloud service system is configured to establish the connection between itself and the secondary storage system based on a comparison between first instance of the security token and the second instance of the security token.

2. The method of claim 1 , further comprising receiving from the web browser associated with the user, the request to establish the connection with the cloud service system.

3. The method of claim 1 , wherein the redirection includes a code.

4. The method of claim 3 , wherein the cloud service system provides the code to the cloud identity provider and requests from the cloud identity provider an access token.

5. The method of claim 4 , wherein the cloud identity provider provides the access token, wherein the cloud service system requests user information associated with the access token.

6. The method of claim 5 , wherein the cloud service system receives the user information and verifies the user information based on the cluster state information.

7. The method of claim 6 , wherein the cloud service system redirects the web browser associated with the user to a particular node of a secondary storage system based on host information included in the cluster state information.

8. The method of claim 7 , wherein the secondary storage system receives the redirect causes any node of the secondary storage system to handle the redirect.

9. The method of claim 8 , wherein the node of the secondary storage system handling the redirect sends to the cloud service system the cluster state information that includes the second instance of the security token and sends the request for the certificate.

10. The method of claim 1 , wherein the cloud service system stores the cluster state information received from the cloud identity provider via the web browser for a predetermined period of time.

11. The method of claim 10 , wherein the cloud service system establishes the connection in the event the second instance of the security token included in the cluster state information received from a node of a secondary storage system handling the request is received within the predetermined period of time.

12. The method of claim 1 , wherein the web browser associated with the user is permitted to access and manage a secondary storage system via the cloud service system after the connection is established.

13. The method of claim 12 , wherein in response to a command, the web browser associated with user causes a backup snapshot from a primary system associated with the secondary storage system to the secondary storage system via the cloud service system.

14. The method of claim 1 , wherein the cluster state information includes host information that is based on a manner in which the user logs into a secondary storage system via the web browser.

15. The method of claim 1 , wherein the cloud service system registers a plurality of secondary storage systems associated with the user, wherein the cloud service system enables the user to manage the plurality of secondary storage systems via the cloud service system.

16. The method of claim 1 , wherein the cluster state information is encrypted using a shared secret known to a secondary storage system and the cloud service system.

17. The method of claim 16 , wherein the cloud service system decrypts the encrypted cluster state information using the shared secret.

18. The method of claim 17 , wherein the cloud service system prevents the connection from being established in the event the cloud service system is unable to decrypt the encrypted cluster state information using the shared secret.

19. A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

generating, by a secondary storage system, cluster state information in response to a request to establish a connection with a cloud service system, wherein the cluster state information includes a first instance of a security token;

providing, by the secondary storage system, the cluster state information to a web browser associated with a user, wherein the web browser associated with the user is redirected to a cloud identity provider, wherein the cloud identity provider authenticates the user and upon successful authentication, the cloud identify provider redirects the web browser associated with the user to the cloud service system, wherein a redirection includes the cluster state information, wherein the cluster state information that includes the first instance of the security token;

requesting, by the secondary storage system, from the cloud service system a certificate; and

providing, by the secondary storage system, to the cloud service system the cluster state information that includes a second instance of the security token, wherein the cloud service system is configured to establish the connection between itself and the secondary storage system based on a comparison between first instance of the security token and the second instance of the security token.

20. A secondary storage system, comprising:

a processor configured to:

generate cluster state information in response to a request to establish a connection with a cloud service system, wherein the cluster state information includes a first instance of a security token;

provide the cluster state information to a web browser associated with a user, wherein the web browser associated with the user is redirected to a cloud identity provider, wherein the cloud identity provider is configured to authenticate the user and upon successful authentication, the cloud identify provider is configured to redirect the web browser associated with the user to the cloud service system, wherein a redirection includes the cluster state information, wherein the cluster state information that includes the first instance of the security token;

request, by the secondary storage system, from the cloud service system a certificate; and

provide, by the secondary storage system, to the cloud service system the cluster state information that includes a second instance of the security token, wherein the cloud service system is configured to establish the connection between itself and the secondary storage system based on a comparison between first instance of the security token and the second instance of the security token; and

a memory coupled to the processor and configured to provide the processor with instructions.