Processing authentication requests for unified access management systems and applications
Disclosed are apparatuses, systems, and techniques that improve efficiency and decrease latency of processing of authorization requests by cloud-based access servers that evaluate access rights to access various cloud-based services. The techniques include but are not limited to generating and processing advanced authorization requests that anticipate future authorization requests that may be generated by cloud-based services. The techniques further include processing of frequently accessed policies and policy data dependencies and preemptive generation and processing of authorization requests that are replicated from existing authorization requests.
1. A method comprising:
receiving a request of a user to access a first resource of a plurality of resources;
sending, to an access server, a first authorization request to evaluate an authorization level corresponding to the user for accessing the first resource;
obtaining a historical data associated with one or more user sessions involving previous interactions of the user with the plurality of resources;
predicting, based on the historical data, that the user will request access, within a target time, to a second resource of the plurality of resources with at least a threshold probability;
sending, to the access server, a second authorization request to evaluate an authorization level corresponding to the user for accessing at least the second resource, wherein the second authorization request is to cause the access server to download an authorization data associated with the second authorization request;
receiving, from the access server, a first authorization response indicative of the authorization level corresponding to the user for accessing the first resource; and
receiving, from the access server, a second authorization response indicative of the authorization level corresponding to the user for accessing the second resource, wherein the second authorization response is obtained using the authorization data.
2. The method of claim 1 , wherein the second resource comprises at least one of a gaming application, a video streaming application, an audio streaming application, or a database application.
3. The method of claim 1 , wherein the second resource is supported by a cloud service.
4. The method of claim 1 , wherein the access server comprises a unified access management (UAM) server.
5. The method of claim 4 , wherein the authorization data comprises one or more UAM policies, at least one UAM policy of the one or more UAM policies specifying access rights for the second resource.
6. The method of claim 1 , wherein the first authorization request comprises a request to authenticate the user.
7. The method of claim 1 , wherein the second authorization request is an advanced authorization request, and wherein the second authorization response is caused by sending, to the access server, a third authorization request, wherein the third authorization request is to evaluate an authorization level corresponding to the user for accessing the second resource.
8. The method of claim 1 , wherein the historical data comprises statistics of the user accessing the second resource over a predetermined historical period of time.
9. The method of claim 8 , wherein the statistics of the user accessing the second resource comprises one or more correlations between the user accessing the first resource and accessing the second resource.
10. The method of claim 1 , wherein the second authorization request is to evaluate an authorization level, corresponding to the user, for accessing at least the second resource and a third resource, the method further comprising:
receiving, from the access server, a third authorization response indicative of an authorization level corresponding to the user for accessing the third resource to the user, wherein the third authorization response is obtained using the authorization data.
11. A system comprising:
a memory device; and
one or more processing devices, communicatively coupled to the memory device, to:
receive a request of a user to access a first resource of a plurality of resources;
send, to an access server, a first authorization request to evaluate accessibility of the first resource to the user;
obtain a historical data associated with user sessions involving previous interactions of the user with the plurality of resources;
predict, based on the historical data, that the user will request access, within a target time, to a second resource of the plurality of resources with at least a threshold probability;
send, to the access server, a second authorization request to evaluate accessibility of at least the second resource to the user, wherein the second authorization request is to cause the access server to download an authorization data associated with the second authorization request;
receive, from the access server, a first authorization response indicative of accessibility of the first resource to the user; and
receive, from the access server, a second authorization response indicative of accessibility of the second resource to the user, wherein the second authorization response is obtained using the authorization data.
12. The system of claim 11 , wherein the second resource is supported by a cloud service and comprises at least one of a gaming application, a video streaming application, an audio streaming application, or a database application.
13. The system of claim 11 , wherein the access server comprises a unified access management (UAM) server, and wherein the authorization data comprises one or more UAM policies, at least one UAM policy of the one or more UAM policies specifying access rights for the second resource.
14. The system of claim 11 , wherein the second authorization request is an advanced authorization request, and wherein the second authorization response is caused by sending, to the access server, a third authorization request, wherein the third authorization request is to evaluate accessibility of the second resource to the user.
15. The system of claim 11 , wherein the historical data comprises one or more statistics of the user accessing the second resource over a predetermined historical period of time, and wherein the statistics of the user accessing the second resource comprises correlations between the user accessing the first resource and accessing the second resource.
16. A non-transitory computer-readable medium storing instructions thereon, wherein the instructions, when executed by a processing device, cause the processing device to:
receive a request of a user to access a first resource of a plurality of resources;
send, to an access server, a first authorization request to evaluate an authorization level corresponding to the user for accessing the first resource;
obtain a historical data associated with user sessions involving previous interactions of the user with the plurality of resources;
predict, based on the historical data, that the user will request access, within a target time, to a second resource of the plurality of resources with at least a threshold probability;
send, to the access server, a second authorization request to evaluate an authorization level corresponding to the user for accessing at least the second resource to the user, wherein the second authorization request is to cause the access server to download an authorization data associated with the second authorization request;
receive, from the access server, a first authorization response indicative of the authorization level corresponding to the user for accessing the first resource; and
receive, from the access server, a second authorization response indicative of of the authorization level corresponding to the user for accessing the second resource, wherein the second authorization response is obtained using the authorization data.
17. The non-transitory computer-readable medium of claim 16 , wherein the second resource is supported by a cloud service and comprises at least one of a gaming application, a video streaming application, an audio streaming application, or a database application.
18. The non-transitory computer-readable medium of claim 16 , wherein the access server comprises a unified access management (UAM) server, and wherein the authorization data comprises one or more UAM policies, each of the one or more UAM policies specifying access rights for the second resource.
19. The non-transitory computer-readable medium of claim 16 , wherein the second authorization request is an advanced authorization request, and wherein the second authorization response is caused by sending, to the access server, a third authorization request, wherein the third authorization request is to evaluate the authorization level corresponding to the user for accessing the second resource.
20. The non-transitory computer-readable medium of claim 16 , wherein the historical data comprises one or more statistics of the user accessing the second resource over a predetermined historical period of time, and wherein the statistics of the user accessing the second resource comprises one or more correlations between the user accessing the first resource and accessing the second resource.