Authentication patterns
Authentication is an IAM function that establishes an identity when attempting to access a cloud resource. Within hybrid environments, you need to plan for authenticating different types of users and identities. You need a way to uniquely identify and authenticate a user to allow them access to a cloud platform. An authentication solution should also be able to authenticate users based on a range of identity providers.
Authentication functions recognize a subset or combination of the following identity providers:
- A cloud directory
- A social identity provider (such as Google or Facebook)
- An enterprise-hosted identity provider
- A cloud-hosted identity provider
Once logged in or authenticated by an identity provider, a cloud user should be able to use the identity context (IAM token) to access cloud runtimes or services without having to log in again. This is also referred to as an SSO requirement.
Similarly, the cloud user may have...
