IP Library › Granted Patent US 12,074,878
Granted Patent B2
US 12,074,878 · App. 17/364,745 · Granted Aug 27, 2024

Account provisioning manager

Inventors: Steve Ball (Redmond, WA); Justin Anthony Niles (Woodinville, WA); Muhammad Omer Iqbal (Redmond, WA); Sadie Elise Henry (Windsor, CO); Sangeeta Ranjit (Bellevue, WA); Sarat Chandra Subramaniam (Bellevue, WA); Michael Vincent McLaughlin (Seattle, WA); Rachel Anne Brown Teller (Seattle, WA)
Assignee: Microsoft Technology Licensing, LLC
H04L63/102G06Q20/20G06Q20/206H04L63/101H04L67/306
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,074,878
App. No.
17/364,745
Granted
Aug 27, 2024
Kind
B2
Abstract

An account provisioning manager is disclosed. A placeholder account is generated with a primary work set attribute and a plurality of enhanced work set attributes. Initially, the primary work set attribute is populated with data to convert the placeholder account into an onboarded operating account. Subsequently, the plurality of enhanced work set attributes are populated via data propagation into the onboarded operating account, wherein an enhanced work set attribute of the plurality of enhanced work set attributes is selectively populated in response to a trigger for the onboarded operating account.

Claims (45)

1. A method, comprising:

storing a plurality of placeholder accounts associated with an identity service, the plurality of placeholder accounts including at least a first set of placeholder accounts corresponding to a first user class associated with a first user attribute and a second set of placeholder accounts corresponding to a second user class associated with a second user attribute;

based at least on an indication that a user account is to be onboarded in the identity service for a user and further based at least on the user being included in the first user class as a result of the user having the first user attribute, selecting a placeholder account for the user from the first set of placeholder accounts; and

reducing latency of onboarding the user account, which is based on the placeholder account, in a network into the identity service by performing the following operations:

converting the placeholder account into a provisional onboarded operating account by initially populating a primary work set attribute that is included in the placeholder account with data, which enables the provisional onboarded operating account to be used as an operating account in the identity service; and

after initially populating the primary work set attribute with the data, completing the onboarding of the user account by populating a plurality of enhanced work set attributes that are included in the placeholder account via data propagation into the provisional onboarded operating account to provide a complete onboarded operating account, wherein completing the onboarding of the user account comprises:

triggering population of an enhanced work set attribute of the plurality of enhanced work set attributes based on an operation being performed with regard to the provisional onboarded operating account and further based on the enhanced work set attribute being associated with the first user class.

2. The method of claim 1 , wherein the primary work set attributes are ranked with higher priority for population than the enhanced work set attributes.

3. The method of claim 1 , wherein the trigger includes user access of the enhanced work set attribute.

4. The method of claim 1 , wherein the trigger reassigns priority for population of the enhanced work set attribute.

5. The method of claim 1 , wherein populating the plurality of enhanced work set attributes includes accessing data from data storage outside of an enterprise.

6. The method of claim 1 , wherein the data to convert the placeholder account into an onboarded operating account includes employment data.

7. A computer readable storage device, which is not a propagating signal, to store computer executable instructions to control a processor to:

store a plurality of placeholder accounts associated with an identity

service, the plurality of placeholder accounts including at least a first set of placeholder accounts corresponding to a first user class associated with a first user attribute and a second set of placeholder accounts corresponding to a second user class associated with a second user attribute;

based at least on an indication that a user account is to be onboarded in the identity service for a user and further based at least on the user being included in the first user class as a result of the user having the first user attribute, select a placeholder account for the user from the first set of placeholder accounts; and

reduce latency of onboarding the user account, which is based on the placeholder account, in a network into the identity service by performing the following operations:

convert the placeholder account into a provisional onboarded operating account by initially populating a primary work set attribute that is included in the placeholder account with data, which enables the provisional onboarded operating account to be used as an operating account in the identity service; and

after the primary work set attribute is initially populated with the data, complete the onboarding of the user account by populating a plurality of enhanced work set attributes that are included in the placeholder account via data propagation into the provisional onboarded operating account to provide a complete onboarded operating account, wherein complete the onboarding of the user account comprises:

trigger population of an enhanced work set attribute of the plurality of enhanced work set attributes based on an operation being performed with regard to the provisional onboarded operating account and further based on the enhanced work set attribute being associated with the first user class.

8. The computer readable storage device of claim 7 , wherein the trigger reassigns priority for population of the enhanced work set attribute.

9. The computer readable storage device of claim 7 , wherein the plurality of enhanced work set attributes are ranked in priority with respect to themselves.

10. A system, comprising:

a memory device to store a set of instructions and to further store a plurality of placeholder accounts associated with an identity service, the pluraliy of placeholder accounts including at least a first set of placeholder accounts corresponding to a first user class associated with a first user attribute and a second set of placeholder accounts corresponding to a second user class associated with a second user attribute; and

a processor to execute the set of instructions to:

based at least on an indication that a user account is to be onboarded in the identity service for a user and further based at least on the user being included in the first user class as a result of the user having the first user attribute, select a placeholder account for the user from the first set of placeholder accounts; and

reduce latency of onboarding the user account, which is based on the placeholder account, into the identity service by performing the following operations:

convert the placeholder account into a provisional onboarded operating account by initially populating a primary work set attribute that is included in the placeholder account with data, which enables the provisional onboarded operating account to be used as an operating account in the identity service; and

after the primary work set attribute is initially populated with the data, complete the onboarding of the user account by populating a plurality of enhanced work set attributes that are included in the placeholder account via data propagation into the provisional onboarded operating account to provide a complete onboarded operating account, wherein complete the onboarding of the user account comprises:

trigger population of an enhanced work set attribute of the plurality of enhanced work set attributes based on an operation being performed with regard to the provisional onboarded operating account and further based on the enhanced work set attribute being associated with the first user class.

11. The system of claim 10 , wherein the enhanced work set attributes are populated with data received from sources outside of an enterprise.

12. The system of claim 10 , wherein the identity service is included in a cloud service.

13. The method of claim 1 , wherein the complete onboarded operating account includes full status of a user associated with the user account.

14. The method of claim 1 , wherein triggering the population of the enhanced work set attribute comprises: triggering the population of the enhanced work set attribute while another enhanced work set attribute of the plurality of enhanced work set attributes is temporarily paused.

15. The method of claim 1 , further comprising: gating performance of a second operation with regard to the user account until a second enhanced work set attribute of the plurality of enhanced work set attributes is populated.

16. The method of claim 1 , wherein the first user class is a temporary employee class, and the first user attribute indicates employment as a temporary employee; and

wherein the second user class is a permanent employee class, and the second user attribute indicates employment as a permanent employee.

17. The method of claim 1 , wherein the first user class is a permanent employee class, and the first user attribute indicates employment as a permanent employee; and

wherein the second user class is a temporary employee class, and the second user attribute indicates employment as a temporary employee.

18. The system of claim 10 , wherein the first user class is a temporary employee class, and the first user attribute indicates employment as a temporary employee; and

wherein the second user class is a permanent employee class, and the second user attribute indicates employment as a permanent employee.

19. The system of claim 10 , wherein the first user class is a permanent employee class, and the first user attribute indicates employment as a permanent employee; and

wherein the second user class is a temporary employee class, and the second user attribute indicates employment as a temporary employee.

20. The system of claim 10 , wherein the first user class is a first department class, and the first user attribute indicates employment in a first department of an enterprise; and

wherein the second user class is a second department class, and the second user attribute indicates employment in a second department of the enterprise that is different from the first department.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 5, 2021
From: IQBAL, MUHAMMAD OMER
To: MICROSOFT TECHNOLOGY LICENSING, LLC
Reel/Frame 057089/0850 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 30, 2021
From: BALL, STEVE; NILES, JUSTIN ANTHONY; HENRY, SADIE ELISE; RANJIT, SANGEETA; SUBRAMANIAM, SARAT CHANDRA; MCLAUGHLIN, MICHAEL VINCENT; TELLER, RACHEL ANNE BROWN
To: MICROSOFT TECHNOLOGY LICENSING, LLC
Reel/Frame 056726/0030 →
Continuity (1)
Related Publication 20230007004A1 · Jan 5, 2023