Computer system and user management method
In a computer system, a tenant administrator performs user registration into and a login to a purchase manager, and then makes a request to purchase a tenant. Registered user information is stored into a marketplace user manager. An E2EO unit creates a tenant and then creates, for each tenant, a tenant user manager structured to authenticate and authorize a general user of a service. When a user who has performed the user registration into the purchase manager uses the service of the tenant, the tenant user manager delegates processing to the marketplace user manager.
1 . A computer system for providing a service corresponding to each of a plurality of tenants, the computer system comprising:
one or more processors comprising hardware, wherein
the one or more processors are configured to implement:
a tenant creation system structured to create a tenant upon receipt of a tenant creation request and including an intra-tenant creation system user manager structured to authenticate and authorize a user who makes the tenant creation request; and
a tenant operating system structured to run the tenant created,
wherein
the tenant operating system includes a tenant user manager structured to authenticate and authorize a user of the service, the tenant user manager being separated from the tenant creation system,
the intra-tenant creation system user manager and the tenant user manager each being individually constructed and isolated from each other,
based on receiving a login request from a terminal, the tenant user manager recognizes whether a request source is the user of the service or the user who makes the tenant creation request,
based on recognizing that the request source is the user who makes the tenant creation request, the tenant user manager delegates, to the intra-tenant creation system user manager, authentication and authorization of the user who has made the tenant creation request, and
based on recognizing that the request source is the user of the service, the tenant user manager performs the authentication and the authorization of the user of the service.
2 . The computer system according to claim 1 , wherein
the tenant operating system includes the tenant user manager structured to authenticate and authorize a user of the service for each tenant.
3 . The computer system according to claim 1 , wherein
the tenant creation system includes a client information storage structured to store client information used for returning the processing to a client after authentication performed upon receipt of a delegation request from the tenant user manager.
4 . The computer system according to claim 1 , wherein
the tenant creation system delegates authentication and authorization of a user, who has requested a login to the tenant creation system, to the tenant user manager of a tenant, the tenant being created in response to a request from the user.
5 . The computer system according to claim 4 , wherein
the tenant creation system includes a user information storage structured to store information on a user who has made the tenant creation request and identifier information for a created tenant associated with each other, and
the tenant creation system consults the user information storage to identify a tenant to be a delegation destination.
6 . The computer system according to claim 4 , wherein
the tenant creation system includes a user information storage structured to store information on a user who has made the tenant creation request and a uniform resource locator (URL) of a private page of the user in the tenant creation system associated with each other, and
the tenant creation system consults the user information storage to cause a transition of display to the private page after authentication performed by the delegation destination.
7 . The computer system according to claim 4 , wherein
the tenant creation system receives a user registration request for the tenant creation system as the tenant creation request, creates a tenant, and stores information on a user who has made the user registration request into the tenant user manager of the tenant created.
8 . The computer system according to claim 1 , wherein
the tenant creation system creates the tenant user manager in response to the creation of the tenant, the tenant user manager being associated with the tenant.
9 . The computer system according to claim 8 , wherein
the tenant creation system creates each tenant user manager as a separate container.
10 . A user management method applied to a computer system for providing a service corresponding to each of a plurality of tenants, the user management method comprising:
causing a tenant creation system to create a tenant upon receipt of a tenant creation request;
causing an intra-tenant creation system user manager to authenticate and authorize a user who makes the tenant creation request;
causing a tenant operating system to run the tenant created;
causing the tenant operating system to authenticate and authorize a user of the service using a tenant user manager separated from the tenant creation system,
wherein the intra-tenant creation system user manager and the tenant user manager are each individually constructed and isolated from each other;
causing, based on receiving a login request from a terminal, the tenant user manager to recognize whether a request source is the user of the service or the user who makes the tenant creation request;
causing, based on recognizing that the request source is the user who makes the tenant creation request, the tenant user manager to delegate, to the intra-tenant creation system user manager, authentication and authorization of the user who has made the tenant creation request; and
causing, based on recognizing that the request source is the user of the service, the tenant user manager to perform the authentication and the authorization of the user of the service.