Universal identity management or governance over applications
Techniques for identity management, and more particularly, to techniques for performing universal identity management or governance over a wide variety of applications. In one aspect a computer-implement method is provided that includes receiving a request for a query of data or a CRUD operation on the data. The data is part of a target application hosted by an enterprise. The method further includes obtaining a schema of objects associated with the target application. The schema models a relationship between the objects, and the objects represent the data of the target application. The method further includes executing the query or CRUD operation on the objects based on the schema, executing the query or CRUD operation on the data based on the schema, and reporting results of the query or CRUD operation on the data.
1. A method comprising:
receiving, at a data processing system, a request for a query of data or a CRUD operation on the data, wherein the data is part of a target application governed by an enterprise using a governance framework comprising a governance services layer, a governance entities layer, and a target application entities layer;
obtaining, by the data processing system from the governance framework, a schema of objects associated with the target application, wherein:
the schema is an enriched version of the target application that models a relationship between the objects,
the objects are comprised of application non-specific objects and application specific objects,
the application non-specific objects reside within the governance entities layer and represent information and tasks to be tracked within the enterprise that are not specific to the target application;
the application specific objects reside within the within the target application entities layer and represent the data of the target application, and
the application specific objects have relationships between each other and with the non-application specific objects;
executing, by the data processing system using the governance services layer, the query or CRUD operation on the application specific objects, the application non-specific objects, or a combination thereof based on the schema;
updating, by the data processing system using the governance services layer, the schema to account for executing the query or CRUD operation on the application specific objects, the application non-specific objects, or the combination thereof;
executing, by the data processing system using the governance services layer, the query or CRUD operation on the data, the information and tasks, or a combination thereof based on the updated schema, wherein the executing the query or CRUD operation on the data, the information and tasks, or the combination thereof includes translating the query or CRUD operation into one or more schema specific calls to the target application; and
reporting, by the data processing system using the governance services layer, results of the query or CRUD operation on the data.
2. The method of claim 1 , wherein the calls are configured to execute the query or the CRUD operation on the data of the target application in accordance with the updated schema.
3. The method of claim 1 , wherein the reporting the results of the query or CRUD operation includes reporting all object mutations performed on the data, the information and tasks, or the combination thereof over a lifecycle of the objects.
4. A non-transitory computer-readable memory storing a plurality of instructions executable by one or more processors, the plurality of instructions comprising instructions that when executed by the one or more processors cause the one or more processors to perform processing comprising:
receiving, at a data processing system, a request for a query of data or a CRUD operation on the data, wherein the data is part of a target application governed by an enterprise using a governance framework comprising a governance services layer, a governance entities layer, and a target application entities layer;
obtaining, by the data processing system from the governance framework, a schema of objects associated with the target application, wherein:
the schema is an enriched version of the target application that models a relationship between the objects,
the objects are comprised of application non-specific objects and application specific objects, and
the application non-specific objects reside within the governance entities layer and represent information and tasks to be tracked within the enterprise that are not specific to the target application;
the application specific objects reside within the within the target application entities layer and represent the data of the target application, and
the application specific objects have relationships between each other and with the non-application specific objects;
executing, by the data processing system using the governance services layer, the query or CRUD operation on the application specific objects, the application non-specific objects, or a combination thereof based on the schema;
updating, by the data processing system using the governance services layer, the schema to account for executing the query or CRUD operation on the application specific objects, the application non-specific objects, or the combination thereof;
executing, by the data processing system using the governance services layer, the query or CRUD operation on the data, the information and tasks, or a combination thereof based on the updated schema, wherein the executing the query or CRUD operation on the data, the information and tasks, or the combination thereof includes translating the query or CRUD operation into one or more schema specific calls to the target application; and
reporting, by the data processing system using the governance services layer, results of the query or CRUD operation on the data.
5. The non-transitory computer-readable memory of claim 4 , wherein the calls are configured to execute the query or the CRUD operation on the data of the target application in accordance with the updated schema.
6. The non-transitory computer-readable memory of claim 4 , wherein the reporting the results of the query or CRUD operation includes reporting all object mutations performed on the data, the information and tasks, or the combination thereof over a lifecycle of the objects.
7. A system comprising:
one or more processors; and
a memory coupled to the one or more processors, the memory storing a plurality of instructions executable by the one or more processors, the plurality of instructions comprising instructions that when executed by the one or more processors cause the one or more processors to perform processing comprising:
receiving a request for a query of data or a CRUD operation on the data, wherein the data is part of a target application governed by an enterprise using a governance framework comprising a governance services layer, a governance entities layer, and a target application entities layer;
obtaining, from the governance framework, a schema of objects associated with the target application, wherein:
the schema is an enriched version of the target application that models a relationship between the objects,
the objects are comprised of application non-specific objects and application specific objects, and
the application non-specific objects reside within the governance entities layer and represent information and tasks to be tracked within the enterprise that are not specific to the target application;
the application specific objects reside within the within the target application entities layer and represent the data of the target application, and
the application specific objects have relationships between each other and with the non-application specific objects;
executing, using the governance services layer, the query or CRUD operation on the application specific objects, the application non-specific objects, or a combination thereof based on the schema;
updating, using the governance services layer, the schema to account for executing the query or CRUD operation on the application specific objects, the application non-specific objects, or the combination thereof;
executing, using the governance services layer, the query or CRUD operation on the data, the information and tasks, or a combination thereof based on the updated schema, wherein the executing the query or CRUD operation on the data, the information and tasks, or the combination thereof includes translating the query or CRUD operation into one or more schema specific calls to the target application; and
reporting, using the governance services layer, results of the query or CRUD operation on the data.
8. The system of claim 7 , wherein the calls are configured to execute the query or the CRUD operation on the data of the target application in accordance with the updated schema.
9. The system of claim 7 , wherein the reporting the results of the query or CRUD operation includes reporting all object mutations performed on the data, the information and tasks, or the combination thereof over a lifecycle of the objects.