Abstract: A computer-implemented process for an endpoint for automated fulfillment, includes: in an Automatic Fulfillment (AF) server: creating an endpoint on the AF server; selecting supported commands; and for each command, defining required and optional parameters and endpoint type specific implementation details; and in a Compliance Manager (CM): running discovery to find new endpoint and create metadata for it in the CM; for each command to be automated, filling in mappings for at least all required parameters; and enabling the command; enabling the endpoint; binding the endpoint to a business source; and ensuring that the business source uses a fulfillment process that uses the AF server.

Abstract: An access management system includes an access management server and one or more fulfillment servers associated with endpoint computers of a production computer system. The fulfillment server includes connectors operative to translate change requests into transactions with the endpoint computer systems to modify access-control records. Fulfillment polling communications are used in which the fulfillment server sends request messages requesting retrieval of active change requests from a database at the access management server, and the access management server sends response messages containing active change requests retrieved from the database. The change requests from the response messages are provided to the connectors to cause the connectors to translate the change requests into corresponding transactions and to perform the transactions with the endpoint computer systems to make modifications to the access-control records of the endpoint computer systems.

Abstract: A computer-implemented process for an endpoint for automated fulfillment, includes: in an Automatic Fulfillment (AF) server: creating an endpoint on the AF server; selecting supported commands; and for each command, defining required and optional parameters and endpoint type specific implementation details; and in a Compliance Manager (CM): running discovery to find new endpoint and create metadata for it in the CM; for each command to be automated, filling in mappings for at least all required parameters; and enabling the command; enabling the endpoint; binding the endpoint to a business source; and ensuring that the business source uses a fulfillment process that uses the AF server.

Abstract: Techniques are provided for providing access to a stored secret using a callback function that generates stable system values. The callback function, which is stored in a library file, is verified by securely storing a signature of the library file and later generating another signature of the library file. Access to the stored secret using the callback function is only permitted when the callback function is verified.