Abstract: Systems and methods for receiving and sending messages about changes to data attributes are described. A message that includes all common data attributes associated with a first reference object is received. The data attributes in the message are mapped to common data attributes in a second reference object. The type of the message is determined, where the message is either a synchronization message or a key change message. The common data attributes in the second reference object are updated to match the common data attributes in the first reference object if the message is a synchronization message. A unique data attribute in the second reference object is updated if the message is a key change message.

Abstract: A system for provisioning content to at least one user is described. A content provisioning server is used. The content provisioning server includes a content provisioning application in communication with a user database. The content provisioning application is configured to access the user database to identify a user, determine rights of the user from the user database, and send a user interface to a client computing device that provides user interface items corresponding to the rights and associated links of the user.

Abstract: In a system for searching identity data, a first database includes a plurality of identity records. A computing device includes a processor and memory in electronic communication with the processor. An identity database is stored in the memory and is separate from the first database. The identity database includes the plurality of identity records. Each identity record includes at least two or more data elements. The identity database includes a plurality of past identity records. The past identity records are previous versions of the plurality of identity records. The identity database is searchable by applications in electronic communication with the computing device. The applications in electronic communication with the computing device cannot directly update the identity database.

Abstract: A system for managing changes to identity data is described. A first spoke managing system is described which includes a first database, a first application in communication with the first database, and a first spoke manager in communication with the first application. A first message is generated including a plurality of common data attributes. The first message is sent to a hub managing system. The hub managing system includes a hub manager. The first message including the plurality of common data attributes is received from the first spoke managing system. A plurality of common data attributes are updated. A determination is made if a unique data attribute that uniquely identifies a reference object is being updated. A second message is generated based on the determination. A third message is generated based on the updates of the plurality of common data attributes. The second message and third message are sent.

Abstract: A system for delegating authorization relating to an information technology resource is described. The system includes a processor and memory in electronic communication with the processor. A user database is stored in the memory. The user database includes a plurality of user identifications and trusted circle data. Instructions are stored in the memory and are executable to add a new user to the trusted circle data and to provide a user interface for the new user so that the new user is capable of resetting a password for an account owner or of reinstating an account for the account owner.

Abstract: Systems and methods for receiving and sending messages about changes to data attributes are described. A message that includes all common data attributes associated with a first reference object is received. The data attributes in the message are mapped to common data attributes in a second reference object. The type of the message is determined, where the message is either a synchronization message or a key change message. The common data attributes in the second reference object are updated to match the common data attributes in the first reference object if the message is a synchronization message. A unique data attribute in the second reference object is updated if the message is a key change message.

Abstract: A system for searching identity data is described. A first database includes a plurality of identity records. A computing device includes a processor and memory in electronic communication with the processor. An identity database is stored in the memory and is separate from the first database. The identity database includes the plurality of identity records. Each identity record includes at least two or more data elements. The identity database includes a plurality of past identity records. The past identity records are previous versions of the plurality of identity records. The identity database is searchable by applications in electronic communication with the computing device. The applications in electronic communication with the computing device cannot directly update the identity database.

Abstract: A system for delegating authorization relating to an information technology resource is described. The system includes a processor and memory in electronic communication with the processor. A user database is stored in the memory. The user database includes a plurality of user identifications and trusted circle data. Instructions are stored in the memory and are executable to add a new user to the trusted circle data and to provide a user interface for the new user so that the new user is capable of resetting a password for an account owner or of reinstating an account for the account owner.

Abstract: A system for managing changes to identity data is described. A first spoke managing system is described which includes a first database, a first application in communication with the first database, and a first spoke manager in communication with the first application. A first message is generated including a plurality of common data attributes. The first message is sent to a hub managing system. The hub managing system includes a hub manager. The first message including the plurality of common data attributes is received from the first spoke managing system. A plurality of common data attributes are updated. A determination is made if a unique data attribute that uniquely identifies a reference object is being updated. A second message is generated based on the determination. A third message is generated based on the updates of the plurality of common data attributes. The second message and third message are sent.

Abstract: A system for provisioning content to at least one user is described. A content provisioning server is used. The content provisioning server includes a content provisioning application in communication with a user database. The content provisioning application is configured to access the user database to identify a user, determine rights of the user from the user database, and send a user interface to a client computing device that provides user interface items corresponding to the rights and associated links of the user.