Secure service isolation between instances of cloud products using a SaaS model
The disclosed technology teaches initializing an application instance using a SaaS model in a project implemented on a cloud-based computing service, including running a configuration engine that links a service provider for SaaS application to set configuration parameters for the project and initializing the project in which an application instance will be built, then removing the authorization of the configuration engine to access the project and removing access to set the parameters. The technology also includes running a SaaS application infrastructure builder autonomously, without the service provider having access to the builder, to build the instance, and then delivering the application as a SaaS service. The method further includes running a SaaS maintenance service, under sovereign control of a customer organization, to pull from the service provider and install in the project, maintenance updates for the instance, without exposing data secured by the customer organization to the service provider.
1. A computer-implemented method of initializing an identity management instance using a software as a service (abbreviated SaaS) model in a project implemented on a cloud-based computing service, including:
at a first time, running a SaaS cluster configuration engine that links a service provider for SaaS identity management to set configuration parameters for the project implemented on the cloud-based computing service and initializing the project in which an identity management instance will be built, then removing authorization of the SaaS cluster configuration engine to access to the project, including removing access to set the configuration parameters;
at a second time following the first time, running a SaaS identity management infrastructure builder autonomously, without the service provider having access to the builder, to build the identity management instance in the project;
after the identity management instance is built, delivering identity management services; and
at a third time following the second time, running a SaaS maintenance service, under sovereign control of a customer organization, to pull from the service provider and to install in the project, maintenance updates for the identity management instance, without exposing data secured by the customer organization to the service provider.
2. The computer-implemented method of claim 1 , further including the SaaS identity management infrastructure builder locking down and securing the project in which an identity management instance is built.
3. The computer-implemented method of claim 1 , wherein the cloud-based computing service is one of Google Cloud Platform (abbreviated GCP), Amazon Web Services (abbreviated AWS) or Microsoft Azure Virtual Platform.
4. The computer-implemented method of claim 1 , wherein the identity management instance provides authentication and authorization services to customers.
5. The computer-implemented method of claim 1 , further including the identity management instance delivering identity management services to end user apps visiting a customer's web site.
6. The computer-implemented method of claim 1 , further including the identity management instance delivering identity management services to a customer's web site that is in communication with the identity management instance running in the project.
7. The computer-implemented method of claim 1 , further including:
the service provider for SaaS identity management utilizing a “break glass” scenario for accessing escrowed project access credentials, stored on a different platform than the cloud-based computing service, at a time when the customer organization requests support that requires access to the project and/or configuration parameters of the project; and
generating one or more notices to the customer organization and a security administrator for the service provider that the “break glass” scenario has been invoked.
8. The computer-implemented method of claim 7 , wherein at least two people must collaborate with the service provider for SaaS identity management to retrieve the credentials for the customer.
9. A tangible non-transitory computer readable storage media, including program instructions loaded into memory that, when executed on processors cause the processors to implement a method of initializing an identity management instance using a software as a service (abbreviated SaaS) model in a project implemented on a cloud-based computing service, the method including:
at a first time, running a SaaS cluster configuration engine that links a service provider for SaaS identity management to set configuration parameters for the project implemented on the cloud-based computing service and initializing the project in which an identity management instance will be built, then removing authorization of the SaaS cluster configuration engine to access to the project, including removing access to set the configuration parameters;
at a second time following the first time, running a SaaS identity management infrastructure builder autonomously, without the service provider having access to the builder, to build the identity management instance in the project;
after the identity management instance is built, delivering identity management services; and
at a third time following the second time, running a SaaS maintenance service, under sovereign control of a customer organization, to pull from the service provider and to install in the project, maintenance updates for the identity management instance, without exposing data secured by the customer organization to the service provider.
10. The tangible non-transitory computer readable storage media of claim 9 , further including the SaaS identity management infrastructure builder locking down and securing the project in which an identity management instance is built.
11. The tangible non-transitory computer readable storage media of claim 9 , wherein the cloud-based computing service is one of Google Cloud Platform (abbreviated GCP), Amazon Web Services (abbreviated AWS) or Microsoft Azure Virtual Platform.
12. The tangible non-transitory computer readable storage media of claim 9 , wherein the identity management instance provides authentication and authorization services to customers.
13. The tangible non-transitory computer readable storage media of claim 9 , further including the identity management instance delivering identity management services to end user apps visiting a customer's web site.
14. The tangible non-transitory computer readable storage media of claim 9 , further including the identity management instance delivering identity management services to a customer's web site that is in communication with the identity management instance running in the project.
15. The tangible non-transitory computer readable storage media of claim 9 , further including:
the service provider for SaaS identity management utilizing a “break glass” scenario for accessing escrowed project access credentials, stored on a different platform than the cloud-based computing service, at a time when the customer organization requests support that requires access to the project and/or configuration parameters of the project; and generating one or more notices to the customer organization and a security administrator for the service provider that the “break glass” scenario has been invoked.
16. The tangible non-transitory computer readable storage media of claim 9 , wherein at least two people must collaborate with the service provider for SaaS identity management to retrieve the credentials for the customer.
17. A system for initializing an identity management instance using a software as a service (abbreviated SaaS) model in a project implemented on a cloud-based computing service, the system including a processor, memory coupled to the processor and computer instructions from the non-transitory computer readable storage media of claim 9 loaded into the memory.
18. The system of claim 17 , further including the SaaS identity management infrastructure builder locking down and securing the project in which an identity management instance is built.
19. The system of claim 17 , further including the identity management instance delivering identity management services to end user apps visiting a customer's web site.
20. The system of claim 17 , further including the identity management instance delivering identity management services to a customer's web site that is in communication with the identity management instance running in the project.
21. A computer-implemented method of initializing a secure application instance isolated from malicious code and interacting with a server, the initializing managed using a software as a service (abbreviated SaaS) model in a project implemented on a cloud-based computing service, including:
at a first time, running a SaaS cluster configuration engine that links a service provider for SaaS service to set configuration parameters for the project implemented on the cloud-based computing service and initializing the project in which the secure application instance will be built, then removing authorization of the SaaS cluster configuration engine to access to the project, including removing access to set the configuration parameters;
at a second time following the first time, running a SaaS service infrastructure builder autonomously, without the service provider having access to the builder, to build the secure application instance in the project;
after the secure application instance is built, delivering secure application services for interacting with the server; and
at a third time following the second time, running a SaaS maintenance service, under sovereign control of a customer organization, to pull from the service provider and to install in the project, maintenance updates for the secure application instance, without exposing data secured by the customer organization to the service provider.