Identity management

1. A non-transitory computer readable medium having stored thereon a sequence of instructions which, when stored in memory and executed by a processor cause the processor to perform acts for identity management, the acts comprising:

determining a centralized identity authentication management service for a master identity database of the centralized identity authentication management service on a master node;

establishing a non-master copy of the master identity database that is distributed to a non-master node other than the master node;

establishing ongoing coordination between the master identity database and the non-master copy to synchronize differences between the master identity database and the non-master copy, wherein the differences correspond to at least one data change that is made locally to the non-master copy and is propagated to the master identity database; and

replicating, using a replication facility, at least a policy between a cloud infrastructure node and the non-master node that hosts the non-master copy in a first availability zone, wherein the master node is in a second availability zone.

2. The non-transitory computer readable medium of claim 1 , further comprising instructions which, when stored in memory and executed by the processor cause the processor to perform further acts of:

exposing a uniform resource locator (URL) of the centralized identity authentication management service configured to receive a WRITE request from the non-master node that hosts the non-master copy.

3. The non-transitory computer readable medium of claim 1 , further comprising instructions which, when stored in memory and executed by the processor cause the processor to perform further acts of:

establishing a proxy service within the non-master node, the proxy service configured to process a READ request using the identity authentication management service of the non-master node and configured to forward a WRITE request to the centralized identity authentication management service.

4. The non-transitory computer readable medium of claim 1 , wherein the policy pertains to granting an access to a resource to an identity managed by the centralized identification management service.

5. The non-transitory computer readable medium of claim 4 , further comprising instructions which, when stored in memory and executed by the processor cause the processor to perform further acts of:

deploying a replication facility that performs ongoing coordination between the master identity database in the first availability zone and the non-master identity database in the second availability zone.

6. The non-transitory computer readable medium of claim 1 , further comprising instructions which, when stored in memory and executed by the processor cause the processor to perform further acts of:

recognizing an occurrence of a cloud infrastructure node being added and configuring a copy of the master identity database on the cloud infrastructure node.

7. The non-transitory computer readable medium of claim 6 , further comprising instructions which, when stored in memory and executed by the processor cause the processor to perform further acts of:

deploying the replication facility, wherein the replication facility replicates the policy from the cloud infrastructure node to the non-master node that hosts the non-master copy.

8. The non-transitory computer readable medium of claim 6 , wherein a virtual machine running on the cloud infrastructure node is authenticated by the centralized identity authentication management service on the cloud infrastructure node.

9. A method for identity management, the method comprising:

determining a centralized identity authentication management service for a master identity database of the centralized identity authentication management service on a master node;

establishing a non-master copy of the master identity database that is distributed to a non-master node other than the master node;

establishing ongoing coordination between the master identity database and the non-master copy to synchronize differences between the master identity database and the non-master copy, wherein the differences correspond to at least one data change that is made locally to the non-master copy and is propagated to the master identity database; and

replicating, using a replication facility, at least a policy between a cloud infrastructure node and the non-master node that hosts the non-master copy in a first availability zone, wherein the master node is in a second availability zone.

10. The method of claim 9 , further comprising exposing a uniform resource locator (URL) of the centralized identity authentication management service configured to receive a WRITE request from the non-master node that hosts the non-master copy.

11. The method of claim 9 , further comprising:

establishing a proxy service within the non-master node, the proxy service configured to process a READ request using the identity authentication management service of the non-master node and configured to forward a WRITE request to the centralized identity authentication management service.

12. The method of claim 9 , wherein the policy pertains to granting an access to a resource to an identity managed by the centralized identification management service.

13. The method of claim 12 , further comprising:

deploying a replication facility that performs ongoing coordination between the master identity database in the first availability zone and the non-master identity database in the second availability zone.

14. The method of claim 9 , further comprising:

recognizing an occurrence of a cloud infrastructure node being added and configuring a copy of the master identity database on the cloud infrastructure node.

15. The method of claim 14 , further comprising:

deploying the replication facility, wherein the replication facility replicates the policy from the cloud infrastructure node to the non-master node that hosts the non-master copy.

16. The method of claim 14 , wherein a virtual machine running on the cloud infrastructure node is authenticated by the master centralized identity authentication management service on the cloud infrastructure node.

17. A system for identity management, the system comprising:

a storage medium having stored thereon a sequence of instructions; and

a processor that executes the sequence of instructions to cause the processor to perform acts comprising,

determining a centralized identity authentication management service for a master identity database of the centralized identity authentication management service on a master node;

establishing a non-master copy of the master identity database that is distributed to a non-master node other than the master node;

establishing ongoing coordination between the master identity database and the non-master copy to synchronize differences between the master identity database and the non-master copy, wherein the differences correspond to at least one data change that is made locally to the non-master copy and is propagated to the master identity database; and

replicating, using a replication facility, at least a policy between a cloud infrastructure node and the non-master node that hosts the non-master copy in a first availability zone, wherein the master node is in a second availability zone.

18. The system of claim 17 , further comprising instructions which, when stored in memory and executed by the processor cause the processor to perform further acts of:

exposing a uniform resource locator (URL) of the centralized identity authentication management service configured to receive a WRITE request from the non-master node that hosts the non-master copy.

19. The system of claim 17 , further comprising instructions which, when stored in memory and executed by the processor cause the processor to perform further acts of:

establishing a proxy service within a given computing node, the proxy service configured to process a READ request using the identity authentication management service of the non-master node and configured to forward a WRITE request to the centralized identity authentication management service.

20. The system of claim 17 , wherein the policy pertains to granting an access to a resource to an identity managed by the centralized identification management service.

21. The system of claim 20 , further comprising instructions which, when stored in memory and executed by the processor cause the processor to perform further acts of:

deploying a replication facility that performs ongoing coordination between the master identity database in the first availability zone and the non-master identity database in the second availability zone.

22. The system of claim 17 , further comprising instructions which, when stored in memory and executed by the processor cause the processor to perform further acts of:

recognizing an occurrence of a cloud infrastructure node being added and configuring a copy of the master identity database on the cloud infrastructure node.

23. The system of claim 22 , further comprising instructions which, when stored in memory and executed by the processor cause the processor to perform further acts of:

deploying the replication facility, wherein the replication facility replicates the policy from the cloud infrastructure node to the non-master node that hosts the non-master copy.

24. The system of claim 22 , wherein a virtual machine running on the cloud infrastructure node is authenticated by the centralized identity authentication management service on the cloud infrastructure node.