Uniformly accessing federated user registry topologies

Abstract

An approach for standardizing access to user registries, the approach involving providing a first schema extension to an identity management system and a bridge component to an identity management application wherein the bridge component comprises a second schema extension to the identity management application, receiving a request in a first data format associated with the identity management system, converting the request into a second data format associated with the identity management application and executing the request in the identity management application, receiving a response to the request in the second data format, converting the response into the first data format and returning the response to an end user via the identity management system.

What is claimed is: 
     
         1 . A method for standardizing access to user registries in a cloud environment, the method comprising:
 providing a first schema extension to an identity management system and a bridge component to an identity management application, wherein the bridge component comprises a second schema extension to the identity management application, wherein:
 the identity management application is a repository for communicating with one or more user registries; the first schema extension enables an end user to submit a request in the identity management system which is directed to a subset of the one or more user registries; and the second schema extension enables at least one of custom configuration of the one or more user registries and additional properties to be added to at least one of user data and group data associated with the identity management application 
   receiving a request in a first data format associated with the identity management system, wherein the request comprises at least one of a request for authentication, a request for a retrieval of at least one of individual user data and group data and a request to edit at least one of individual user data and group data;   converting the request into a second data format associated with the identity management application and executing the request in the identity management application, wherein converting the request comprises mapping data into an application programming interface provided by the identity management application;   receiving a response to the request in the second data format;   converting the response into the first data format; and   returning the response via the identity management system.