End point identification

1. A system comprising:

a processor; and

a non-transitory storage medium storing instructions executable on the processor to:

provide an agency identifier comprising a value identifying an authority relationship between a first identity and a second identity, the authority relationship comprising an authorization for a second entity identified by the second identity to access a first service on behalf of a first entity identified by the first identity;

provide a duty identifier based on the agency identifier and a first end point of a plurality of end points, the first end point being a destination to access the first service, and the duty identifier to define an authorization to interact with the first service provided at the first end point;

identify a second end point of the plurality of end points based on the first end point, the second end point being associated with a second service;

associate an authority to access the second end point with the duty identifier, the duty identifier defining an authorization to interact with the second service provided at the second end point; and

accessing the second service at the second end point based on the authority to access the second end point, the accessing of the second service comprising the second entity identified by the second identity accessing the second end point on behalf of the first entity identified by the first identity based on the authority relationship identified by the value of the agency identifier.

2. The system of claim 1 , wherein the identifying of the second end point is based on one of:

a mapping of the plurality of end points, each end point of the plurality of end points being associated with a respective service of a plurality of services;

a semantic selection of services, the semantic selection of services to relate the first end point and the second end point based on a language structure.

3. The system of claim 1 , wherein the instructions are executable on the processor to:

provide a termination end point based on the agency identifier and a termination data structure, the termination data structure to include the first end point and a termination condition associated with the termination end point.

4. The system of claim 1 , wherein the instructions are executable on the processor to:

maintain a history of actions performed by the second entity identified by the second identity on behalf of the first entity identified by the first identity.

5. The system of claim 1 , wherein the instructions are executable on the processor to:

provide an approved action of the first service and a potential impact based on the agency identifier and the duty identifier.

6. A non-transitory computer readable storage medium comprising instructions executable by a processor resource to:

identify a plurality of end points based on a service destination that provides a first service, the plurality of end points providing respective plural services in addition to the first service;

identify, using an agency identifier set to a value, an authority relationship between a first identity and a second identity, the authority relationship comprising an authorization for a second entity identified by the second identity to access a service on behalf of a first entity identified by the first identity;

associate the plurality of end points with the authority relationship between the first identity and the second identity using a duty identifier; and

associate an authority to access the plurality of end points based on the duty identifier; and

access the respective plural services provided by the plurality of end points based on the authority to access the plurality of end points, the accessing of the respective plural services comprising the second entity identified by the second identity accessing the respective plural services on behalf of the first entity identified by the first identity based on the authority relationship identified by the value of the agency identifier.

7. The non-transitory computer readable storage medium of claim 6 , wherein the instructions are executable by the processor resource to:

generate the duty identifier based on the agency identifier.

8. The non-transitory computer readable storage medium of claim 6 , wherein the instructions are executable by the processor resource to:

identify a first end point of the plurality of end points based on a certificate associated with an action of the first end point.

9. The non-transitory computer readable storage medium of claim 6 , wherein the instructions are executable by the processor resource to:

identify a termination data structure based on the duty identifier, the termination data structure including a termination condition associated with a first end point of the plurality of end points;

compare a request to the termination data structure; and

perform a termination action in response to the request satisfying the termination condition.

10. The non-transitory computer readable storage medium of claim 9 , wherein the termination action comprises:

sending a notification to the first entity identified by the first identity with information regarding a cancellation process of the agency identifier in response to the request satisfying the termination condition.

11. A method executed by a system comprising a processor, comprising:

creating an agency identifier that identifies an authority relationship between a first identity and a second identity, the authority relationship comprising an authorization for a second entity identified by the second identity to access a service on behalf of a first entity identified by the first identity;

identifying a potential service end point based on a designated service end point, the designated service end point providing a first service, and the potential service end point providing a second service;

accessing the second service provided by the potential service end point, the accessing of the second service comprising the second entity identified by the second identity accessing the second service on behalf of the first entity identified by the first identity based on the authority relationship;

associating a plurality of end points with the agency identifier, the plurality of end points including the designated service end point and the potential service end point;

calculating authorized actions based on the plurality of end points associated with the agency identifier; and

providing a termination end point based on a termination condition associated with one of the plurality of end points.

12. The method of claim 11 , comprising:

receiving a uniform resource locator and an action using one method from the group consisting of a PUT, a POST, a GET, and a DELETE;

receiving a certificate of authorization based on the authority relationship between the second identity and the first identity;

receiving a termination definition data structure, the termination definition data structure including the plurality of end points and a plurality of termination conditions;

receiving a maximum time period to permit the authorized actions of the authority relationship.

13. The method of claim 11 , comprising:

terminating the authorization relationship between the second identity and the first identity based on the termination condition.

14. The method of claim 11 , comprising:

providing a formatted plurality of actions based on the plurality of end points, the formatted plurality of actions to delimit an allowed impersonation of the first entity by the second entity based on a formatted plurality of action potential data structures including an action and potential impact of the action.

15. The method of claim 11 , comprising:

providing a plurality of action history data structures performed by the second entity identified by the second identity on behalf of the first entity identified by the first identity based on the agency identifier, the plurality of action history data structures including a service end point, an action, and a timestamp.

16. The system of claim 1 , wherein the instructions are executable to:

receive selection by a user of the first service from a plurality of services presented through a portal, wherein the first identity identifies the user, and the second identity identifies an agent that accesses the second end point on behalf of the user,

wherein the associating of the authority to access the second end point with the duty identifier extends the authorization to access the first service on behalf of the user to the second service that is related to the first service.

17. The system of claim 1 , wherein the associating of the authority to access the second end point with the duty identifier extends the authorization to access the first service on behalf of the first identity to the second service that is related to the first service.

18. The system of claim 1 , wherein the second entity identified by the second identity impersonates the first entity identified by the first identity when accessing the second end point.

19. The non-transitory computer readable storage medium of claim 6 , wherein the respective plural services comprise information technology (IT) services.

20. The method of claim 11 , further comprising:

receiving selection by a user of the first service from a plurality of services presented through a portal, wherein the first identity identifies the user, and the second identity identifies an agent that accesses the second service on behalf of the user; and

associating an authority to access the second service to extend an authorization to access the first service on behalf of the user to the second service that is related to the first service.