Replication of account security configurations

1. A data platform comprising:

at least one hardware processor; and

at least one memory storing instructions that cause the at least one hardware processor to perform operations comprising:

receiving a request to replicate a first account maintained by the data platform;

accessing, based on the request, account data associated with the first account, the account data comprising one or more security configurations for the first account; and

in response to the request, replicating the first account using the account data, the replicating of the first account resulting in a second account, the replicating of the first account comprising automatically replicating the one or more security configurations for the first account to the second account, the replicating the one or more security configurations for the first account comprises configuring a refresh token associated with an authorization configuration of the first account, the configuring of the refresh token comprises:

modifying a data structure of the refresh token to include a global identifier; and

modifying a string structure of the refresh token to include the global identifier and a replication group identifier, the replication group identifier identifying a group of accounts, the group of accounts including the first account and the second account.

2. The data platform of claim 1 , wherein replicating the one or more security configurations for the first account further comprises replicating an identity management configuration of the first account to the second account.

3. The data platform of claim 2 , wherein the replicating of the one or more security configurations further comprises configuring an access token associated with the identity management configuration for validation by the second account.

4. The data platform of claim 3 , wherein configuring the access token associated with the identity management configuration comprises modifying a data structure of the access token to include the global identifier.

5. The data platform of claim 4 , wherein the configuring of the access token further comprises:

modifying a string structure of the access token to include the replication group identifier;

replicating a token encryption key used to encrypt the access token; and

modifying an identifier format associated with the access token to include the global identifier.

6. The data platform of claim 2 , wherein the replicating of the identity management configuration comprises:

replicating a provisioner role in the identity management configuration, the provisioner role having associated permissions to provision new users and roles within the first account, the replicating of the provisioner role resulting in a replicated provisioner role having associated permissions to provision new users and roles within the second account;

replicating an integration object associated with the identity management configuration, the integration object providing an interface between the data platform and an identity management service corresponding to the identity management configuration; and

connecting the provisioner role with the integration object.

7. The data platform of claim 1 , wherein the global identifier comprises a combination of a deployment identifier and an entity identifier, the deployment identifier identifying a deployment of the first account, the entity identifier identifying a customer entity corresponding to the first account.

8. The data platform of claim 1 , wherein replicating the one or more security configurations for the first account further comprises replicating the authorization configuration of the first account to the second account.

9. The data platform of claim 8 , wherein the replicating of the authorization configuration of the first account comprises:

replicating an integration object associated with the authorization configuration, the integration object providing an interface between the data platform and an authorization service corresponding to the authorization configuration;

replicating a user in the authorization configuration;

replicating a role in the authorization configuration;

replicating an authorization consent in the authorization configuration; and

linking the authorization consent with the integration object, the user, and the role.

10. The data platform of claim 1 , wherein the configuring of the refresh token further comprises:

replicating a token encryption key used to encrypt the refresh token.

11. The data platform of claim 1 , wherein replicating the one or more security configurations for the first account further comprises replicating an authentication configuration of the first account to the second account.

12. The data platform of claim 11 , wherein replicating the authentication configuration of the first account comprises:

replicating an integration object associated with the authentication configuration, the integration object providing an interface between the data platform and an authentication service associated with the authentication configuration, the replicating of the integration object resulting in a replicated integration object; and

configuring the replicated integration object to include a global account uniform resource locator (URL).

13. A method comprising:

receiving a request to replicate a first account maintained by a data platform;

accessing, based on the request, account data associated with the first account, the account data comprising one or more security configurations for the first account; and

in response to the request, replicating, by one or more hardware processors, the first account using the account data, the replicating of the first account resulting in a second account, the replicating of the first account comprising automatically replicating the one or more security configurations for the first account to the second account, the replicating the one or more security configurations for the first account comprises configuring a refresh token associated with an authorization configuration of the first account, the configuring of the refresh token comprises:

modifying a data structure of the refresh token to include a global identifier; and

modifying a string structure of the refresh token to include the global identifier and a replication group identifier, the replication group identifier identifying a group of accounts, the group of accounts including the first account and the second account.

14. The method of claim 13 , wherein replicating the one or more security configurations for the first account further comprises replicating an identity management configuration of the first account to the second account.

15. The method of claim 14 , wherein the replicating of the one or more security configurations further comprises configuring an access token associated with the identity management configuration for validation by the second account.

16. The method of claim 13 , wherein replicating the one or more security configurations for the first account comprises replicating the authorization configuration of the first account to the second account.

17. The method of claim 16 , wherein the replicating of the authorization configuration of the first account comprises:

replicating an integration object associated with the authorization configuration, the integration object providing an interface between the data platform and an authorization service corresponding to the authorization configuration;

replicating a user in the authorization configuration;

replicating a role in the authorization configuration;

replicating an authorization consent in the authorization configuration; and

linking the authorization consent with the integration object, the user, and the role.

18. The method of claim 13 , wherein replicating the one or more security configurations for the first account further comprises replicating an authentication configuration of the first account to the second account.

19. A non-transitory computer-readable storage medium comprising instructions that, when executed by one or more processors of a machine, configure the machine to perform operations comprising:

receiving a request to replicate a first account maintained by a data platform;

accessing, based on the request, account data associated with the first account, the account data comprising one or more security configurations for the first account; and

in response to the request, replicating, by one or more hardware processors, the first account using the account data, the replicating of the first account resulting in a second account, the replicating of the first account comprising automatically replicating the one or more security configurations for the first account to the second account, the replicating the one or more security configurations for the first account comprises configuring a refresh token associated with an authorization configuration of the first account, the configuring of the refresh token comprises:

modifying a data structure of the refresh token to include a global identifier; and

modifying a string structure of the refresh token to include the global identifier and a replication group identifier, the replication group identifier identifying a group of accounts, the group of accounts including the first account and the second account.

20. The computer-readable storage medium of claim 19 , wherein replicating the one or more security configurations for the first account further comprises replicating an identity management configuration of the first account to the second account.

21. The computer-readable storage medium of claim 20 , wherein the replicating of the one or more security configurations further comprises configuring an access token associated with the identity management configuration for validation by the second account.

22. The computer-readable storage medium of claim 21 , wherein configuring the access token associated with the identity management configuration comprises:

modifying a data structure of the access token to include the global identifier;

modifying a string structure of the access token to include the replication group identifier, the replication group identifier identifying a group of accounts, the group of accounts including the first account and the second account;

replicating a token encryption key used to encrypt the access token; and

modifying an identifier format associated with the access token to include the global identifier.

23. The computer-readable storage medium of claim 19 , wherein replicating the one or more security configurations for the first account comprises replicating the authorization configuration of the first account to the second account.

24. The computer-readable storage medium of claim 19 , wherein configuring of the refresh token comprises:

replicating a token encryption key used to encrypt the refresh token.

25. The computer-readable storage medium of claim 19 , wherein replicating the one or more security configurations for the first account further comprises replicating an authentication configuration of the first account to the second account.

26. The computer-readable storage medium of claim 25 , wherein replicating the authentication configuration of the first account comprises:

replicating an integration object associated with the authentication configuration, the integration object providing an interface between the data platform and an authentication service associated with the authentication configuration, the replicating of the integration object resulting in a replicated integration object; and

configuring the replicated integration object to include a global account uniform resource locator (URL).