Abstract: Techniques are disclosed for performing operations in a distributed computing environment comprising a plurality of computing devices implementing a Kubernetes environment. An indication is received of one or more custom resources of the Kubernetes environment. The custom resources are grouped into a commit set. The commit set is defined as an atomic unit which either succeeds or fails atomically. It is determined that at least one of the custom resources has failed to complete. In response to the determination, the custom resources of the commit set are reverted to a previous consistent state.

Abstract: Solutions for enforcing both syntactic and semantic correctness of domain-specific data queries include: receiving a data query; constraining an operation of the data query to enforce semantic correctness, wherein enforcing semantic correctness comprises: determining semantic information associated with each of a plurality of data entities; based on at least the semantic information, determining whether combining the two data entities of the plurality of data entities is allowed or is not allowed; based on at least determining that combining the two data entities is allowed, permitting combining the two data entities in the data query; and based on at least determining that combining the two data entities is not allowed, preventing combining the two data entities in the data query; and executing the data query. Some examples further include basing the permission on (at least) an ontology between the semantic information of the two data entities and a set of axioms.

Abstract: A method of enhancing a link in collaboration applications includes determining, from content entered into a collaboration application, a string of characters indicating a uniform resource locator (URL). Upon determining the string of characters indicating the URL from the content entered into the collaboration application, the method includes automatically calling a first web service to obtain a representation of content referenced by the URL by sending a request, at least including the URL, to the first web service. The representation of the content referenced by the URL can then be received from the first web service in a format customized for the collaboration application, a computing device on which the collaboration application is implemented, or both.

Abstract: A liquid-submersible thermal management system includes a cylindrical outer shell and an inner shell positioned in an interior volume of the outer shell. The cylindrical outer shell has a longitudinal axis oriented vertically relative to a direction of gravity, and the inner shell defines an immersion chamber. The liquid-submersible thermal management system a spine positioned inside the immersion chamber and oriented at least partially in a direction of the longitudinal axis with a heat-generating component located in the immersion chamber. A working fluid is positioned in the immersion chamber and at least partially surrounding the heat-generating component. The working fluid receives heat from the heat-generating component.

Abstract: Techniques for auto-starting a VPN in a MAM environment are disclosed. A MAM-controlled application is launched on a computer system. Policy is queried and a determination is made as to whether to auto-start a VPN application based on the policy. Based on the policy, the VPN application is auto-started, and the VPN application initiates a VPN tunnel that is usable by at least the MAM-controlled application. Network communications transmitted to or from the MAM-controlled application then pass through the VPN tunnel.

Abstract: A computing device is provided, including a logic subsystem with one or more processors, and memory storing instructions executable by the logic subsystem. These instructions are executed to obtain one or more source images, segment the one or more source images to generate a plurality of segments, determine a priority order for the plurality of segments, and transmit the plurality of segments to a remote computing device in the priority order. The plurality of segments are spatial components generated by spatial decomposition of the one or more source images and/or frequency components that are generated by frequency decomposition of the one or more source images. A remote computing device may receive these components in priority order, and perform certain algorithms on individual components without waiting for the entire image to upload.

Abstract: Innovations in the area of prediction of block vector (“BV”) values improve encoding or decoding of blocks using intra block copy (“BC”) prediction. For example, some of the innovations relate to use of a default BV predictor with a non-zero value. Other innovations relate to use of a selected one of multiple BV predictor candidates for a current block. Still other innovations relate to use of a skip mode in which a current intra-BC-predicted block uses a predicted BV value.

Abstract: A public-private key cryptographic scheme is described for granting authenticating a client to a remote device or service in order to access a secure resource. The client is provided the public key, but the private key is stored in a hardware security module (HSM) that the client is not able to access. The client requests a digital signature be generated from the private key from a secure vault service. The secure vault service accesses the HSM and generates the digital certificate, which is then passed to the client. The digital certificate may be added to a security token request submitted to an identity provider. The identity provider determines whether the digital signature came from the private key.

Abstract: A cloud-connected baseboard management controller (BMC) enables remote management of all management layers of edge-based host machines from the cloud without imposition of costs associated with firewalls and private data connections. A remote management agent incorporated into the BMC enables creation of a remote management-enabled bare-metal server paradigm in which remote management from the cloud is supported at the lowest hardware levels which provides for cost-effective utilization of network resources down to even a single isolated node.

Abstract: Disclosed in some examples are methods, systems, machine-readable media, and devices which provide for real-time personalized suggestions for participants in a network-based communication service. The personalized suggestions may include options for taking actions, content suggestions, and smart replies. These suggestions may be based upon the current conversation and are delivered personally to each participant.

Abstract: Examples are disclosed relating to friction hinges. In one example, a friction hinge comprises a first stub and adjacent second stub extending from a stub substrate. A first finger extends from a finger substrate between the first stub and the second stub and comprises a distal contacting face that is biased into contact with a first biasing face of the first stub. A second finger adjacent to the first finger extends from the finger substrate between the first stub and the second stub and comprises a distal contacting face that is biased into contact with a second biasing face of the second stub. A pin extends through apertures in the first stub, first finger, second finger, and second stub.

Abstract: A computing device is provided, including one or more processing devices, one or more temperature sensors, a fan, and a fan tachometer. The one or more processing devices may be configured to execute an application program. While executing the application program, the one or more processing devices may be further configured to collect performance data including temperature data received from the one or more temperature sensors and fan speed data received from the fan tachometer. The one or more processing devices may be further configured to generate a fan control signal at least in part by applying a machine learning model to the performance data. The one or more processing devices may be further configured to control the fan according to the fan control signal.

Abstract: A dormant account identifier is disclosed. An inactive account can be determined based on whether a user activity of the account is outside a threshold amount. A determination can be made as to whether the inactive account is a dormant account based on account activity of a peer account to the inactive account.

Abstract: Methods, systems, and computer program products are provided for creating a resource management testing environment. An initial population of databases is established in a database ring, having an in initial count of databases and different types of databases that are determined based on an initial database population model. The initial population model receives ring classification information for the database ring from a ring grouping model. A sequence of database population-change events is generated based on a model, to change the population of the databases over time in the ring. An orchestration framework performs testing of resource manager operations based on the model-defined initial population of databases and the model-defined populations of databases changed over time. Model-defined resource usage metrics for each database are utilized to test the resource manager operations. Resource usage metrics and database add/drop events of a production system are used to train the models.

Abstract: Described are examples for deploying workloads in a cloud-computing environment. In an aspect, based on a desired number of workloads of a process to be executed in a cloud-computing environment and based on one or more failure probabilities, an actual number of workloads of the process to execute in the cloud-computing environment to provide a level of service can be determined and deployed. In another aspect, a standby workload can be executed as a second instance of the process without at least a portion of the separate configuration used by the multiple workloads, and based on detecting termination of one of multiple workloads, the standby workload can be configured to execute based on the separate configuration of the separate instance of the process corresponding to the one of the multiple workloads.

Abstract: Systems and methods disclosed herein are related to an intelligent UI element selection system using eye-gaze technology. In some example aspects, a UI element selection zone may be determined. The selection zone may be defined as an area surrounding a boundary of the UI element. Gaze input may be received and the gaze input may be compared with the selection zone to determine an intent of the user. The gaze input may comprise one or more gaze locations. Each gaze location may be assigned a value according to its proximity to the UI element and/or its relation to the UI element's selection zone. Each UI element may be assigned a threshold. If the aggregated value of gaze input is equal to or greater than the threshold for the UI element, then the UI element may be selected.

Abstract: The present disclosure relates to processing operations configured to provide processing that automatically analyzes acoustic signals from attendees of a live presentation and automatically triggers corresponding reaction indications from results of analysis thereof. Exemplary reaction indications provide feedback for live presentations that can be presented in real-time (or near real-time) without requiring a user to manually take action to provide any feedback. As a non-limiting example, reaction indications may be presented in a form that is easy to visualize and understand such as emojis or icons. Another example of a reaction indication is a graphical user interface (GUI) notification that provides a predictive indication of user intent derived from analysis of acoustic signals.

Abstract: Interaction between a user and a conversational digital assistant executing on a computing device is controlled. Multiple interaction pairs are stored in one or more datastores accessible by the conversational digital assistant. Each interaction pair includes an interaction query and an associated assistance operation. An interactive engagement event is detected between the user and the conversational digital assistant, responsive to the storing operation. An interaction pair is selected from the one or more datastores, responsive to the operation of detecting an interactive engagement event. The interaction query of the selected interaction pair is communicated to the user. The assistance operation associated with the communicated interaction query is executed, responsive to receipt of a response from the user to the interaction query.

Abstract: Embodiments of the disclosed technologies include receiving, from a first user device, a first user interface event that includes an upload of a media asset but does not indicate an intended usage for the media asset, determining an intended usage based on a second user interface event, mapping the intended usage to a usage-based specification, converting the media asset to a usage-specific version of the media asset by applying the usage-based specification to the media asset, and initiating a distribution of the usage-specific version of the media asset instead of the media asset to at least one second user device different from the first user device.

Abstract: An optical fibre assembly comprises a hollow core optical waveguide comprising a hollow core surrounded by a structured arrangement of longitudinally extending capillaries providing an inner cladding surrounded by an outer cladding; a diagnostic solid core optical waveguide comprising a solid core surrounded by a cladding, and extending substantially parallel to the hollow core optical waveguide; and a jacket surrounding both the hollow core optical waveguide and the solid core optical waveguide and forming a common mechanical environment for the hollow core optical waveguide and the solid core optical waveguide. The optical fibre assembly may be or may comprise or be included in an optical fibre cable, and may be used in a method for testing hollow core optical waveguides.

Abstract: A disclosed hinge assembly for a head-mounted display device comprises a four-bar linkage. A first linkage of the four-bar linkage is mountable to or forms part of a wearable article for a head of a user. A second linkage and a third linkage of the four-bar linkage each rotatably couple the first linkage to a fourth linkage of the four-bar linkage. The fourth linkage of the four-bar linkage is mountable to or forms part of a display device. A disclosed head-mounted display device comprises a display device; a rearward mount by which the head-mounted display device is mountable to a wearable article for a head of a user; and a hinge assembly rotatably coupling the display device to the rearward mount. The hinge assembly includes a four-bar linkage that provides a path of travel for the display device along a curved path from a deployed state to a stowed state.

Abstract: A method to build a lookup decoder for mapping error syndromes based on quantum-stabilizer code to corresponding error corrections comprises (A) enumerating a subset of error syndromes up to a maximum error weight based on the quantum-stabilizer code; (B) iterating through the subset of error syndromes to compute an error state of highest probability for each error syndrome of the subset, where the error state defines error in a qubit register of a quantum computer; and (C) for each error syndrome of the subset of error syndromes, storing in classical computer memory an error correction based on the error state of highest probability and mapped to that error syndrome.

Abstract: Non-limiting examples of the present disclosure describe implementation of an exemplary synchronization protocol to identify file data for synchronization as well as negotiate how to achieve data transport for synchronization of the file data. In one example, a request for synchronization of data is received from a processing device. In response to receiving the request, a response is generated. The response may comprise: identification of file data for synchronization, instructions for accessing the file data and instructions indicating a data transport protocol to utilize to obtain the file data. The response may be transmitted to the processing device, for example, to enable the processing device to synchronize file data. Other examples are also described.

Abstract: In various embodiments, a computer-implemented method of training a neural network for creating an output signal of different modality from an input signal is described. In embodiments, the first modality may be a sound signal or a visual image and where the output signal would be a visual image or a sound signal, respectively. In embodiments a model is trained using a first pair of visual and audio networks to train a set of codebooks using known visual signals and the audio signals and using a second pair of visual and audio networks to further train the set of codebooks using the augmented visual signals and the augmented audio signals. Further, the first and the second visual networks are equally weighted and where the first and the second audio networks are equally weighted.

Abstract: This document relates to analyzing of network stack functionality that is implemented in hardware, such as on a network adapter. The disclosed implementations employ a programmable network device, such as a switch, to inject events into traffic and mirror the traffic for subsequent analysis. The events can have user-specified event parameters to test different types of network stack behavior, such as how the network adapters respond to corrupted packets, dropped packets, or explicit congestion notifications.

Abstract: Systems and methods are provided for learning classifiers for annotating a document with predicted labels under extreme classification where there are over a million labels. The learning includes receiving a joint graph including documents and labels as nodes. Multi-dimensional vector representations of a document (i.e., document representations) are generated based on graph convolution of the joint graph. Each document representation varies an extent of reliance on neighboring nodes to accommodate context. The document representations are feature-transformed using a residual layer. Per-label document representations are generated from the transformed document representations based on neighboring label attention. A classifier is trained for each of over a million labels based on joint learning using training data and the per-label document representation. The trained classifier performs highly efficiently as compared to other classifiers trained using disjoint graphs of documents and labels.

Abstract: This application relates to video encoding and decoding, and specifically to tools and techniques for using and providing supplemental enhancement information in bitstreams. Among other things, the detailed description presents innovations for bitstreams having supplemental enhancement information (SEI). In particular embodiments, the SEI message includes picture source data (e.g., data indicating whether the associated picture is a progressive scan picture or an interlaced scan picture and/or data indicating whether the associated picture is a duplicate picture). The SEI message can also express a confidence level of the encoder's relative confidence in the accuracy of this picture source data. A decoder can use the confidence level indication to determine whether the decoder should separately identify the picture as progressive or interlaced and/or a duplicate picture or honor the picture source scanning information in the SEI as it is.

Abstract: Examples are disclosed related to forming solder joints between printed circuits by using radiant heat. One example provides a method of manufacturing an electronic device, the method comprising aligning a contact of a first printed circuit with a via of a second printed circuit. The method further comprises applying radiant heat via an infrared light source to a second surface of the second printed circuit, the radiant heat incident on the via to cause the via to conduct heat to solder located at an interface of the contact and the via, and after heating the solder to reflow, cooling the solder, thereby forming a solder joint between the contact of the first printed circuit and the via of the second printed circuit.

Abstract: Examples of the present disclosure describe systems and methods for dynamically expanding acronyms in audio content. In aspects, a user access of an audio resource may be detected. The audio content of the audio resource may be evaluated to identify acronyms. One or more of the identified acronyms may be evaluated based on a user-specific context of the user and/or a global context associated with the user. Based on the evaluated context(s), expansion candidates and corresponding confidence scores may be determined for each identified acronym. Based on the confidence scores, an expansion candidate may be selected and used to replace the identified acronym when the audio content is consumed by the user.

Abstract: The automatic detection of inconsistencies in a database system is described. A first signature and a second signature are received. The first signature is a signature of a result of a first execution of the query against a database by a first version of database engine program code. The second signature is a signature of a result of a second execution of the query by a second version of the database engine program code. A determination is made of whether the first signature and the second signature match. In response to the first signature and the second signature failing to match, an inconsistency report regarding at least one of the first or second versions of the database engine program code is generated and remediation regarding at least one of the first or second versions of the database engine program code is performed.

Abstract: A mechanism for adjusting the data rate of data to be transmitted over a data channel based on anticipated changes in the communication channel, rather than based on the current state of the communication channel. This is done by accessing real time environment context data obtained from sensor data generated by one or more sensors of a sensor device, and then predicting a future capacity of a communication channel with a subject head-mounted device based on the accessed real time environment context data. The appropriate data rate is then determined based on this predicted future channel capacity rather than the current channel capacity. The data rate of data that is initiated towards the communication channel is then adjusted based on the determined data rate in anticipation of the predicted future capacity of the communication channel.

Abstract: Techniques for correcting an overlay misalignment between an external camera image and a system camera image are disclosed. A first system camera image and a first external camera image are acquired. A first visual alignment is performed between those two images to produce an overlaid image. Some of the content in the overlaid image is surrounded by a bounding element. A position of the bounding element is modified based on movements of the system camera and/or the external camera. In response to performing a second visual alignment using new images, an update vector is computed. Relative movement between the two cameras is determined. Based on the movement and based on the update vector, the bounding element is progressively transitioned to a corrected position in the overlaid image. A speed by which the bounding element is progressively transitioned is proportional to the amount of movement.

Abstract: Embeddable extensions of the functionality of email and calendaring applications are described herein. An originating email and calendaring application formats meeting items to include extensible content, e.g., within the body field of the meeting item. Recipient email and calendaring applications receive the meeting items and, depending on whether they are configured to provide an extended functionality, will either deploy the extensible content item according to the extended functionality or present the extensible content item according to a standardized functionality. The body field includes the extensible content item according to the standardized functionality that is interpretable by configured clients to provide the extended functionality.

Abstract: A thermal management system for cooling electronics includes an immersion tank, a working fluid in the immersion tank, a heat exchanger, a first fluid conduit, and a second fluid conduit. The heat exchanger is configured to transfer thermal energy from the working fluid to ambient air to cool the working fluid. The first fluid conduit provides fluid communication from the immersion tank to the heat exchanger, and the second fluid conduit provides fluid communication from the heat exchanger to a spray nozzle to spray working fluid into the immersion tank.

Abstract: A near-eye display device comprises a pupil-expansion optic, a laser, a drive circuit coupled operatively to the first and second lasers, a spatial light modulator (SLM), and a computer. The SLM has a matrix of electronically controllable pixel elements and is configured to receive emission from the laser and to direct the emission in spatially modulated form to the pupil-expansion optic. Coupled operatively to the drive circuit and to the SLM, the computer is configured to parse a digital image, trigger the emission from the laser by causing the drive circuit to drive a periodic current through a gain structure of the laser, and control the matrix of pixel elements such that the spatially modulated form of the emission projects an optical image corresponding to the digital image, wherein the periodic current includes plural cycles of modulation driven through the gain structure while the optical image is projected.

Abstract: A computing apparatus comprising one or more computer readable storage media, one or more processors operatively coupled with the one or more computer readable storage media, and an application comprising program instructions stored on the one or more computer readable storage media that direct the computing apparatus to at least display electronic document in a user interface to an application and send a request to an energy analysis service to analyze an energy footprint of the electronic document, wherein the request identifies a characteristic of the electronic document. The program instructions further direct the computing apparatus to receive a reply to the request, wherein the reply includes a recommendation to decrease the energy footprint of the electronic document and modify the electronic document in accordance with the recommendation.

Abstract: Techniques performed by a data processing system for a machine learning driven teleprompter include displaying a teleprompter transcript associated with a presentation on a display of a computing device associated with a presenter; receiving audio content of the presentation including speech of the presenter in which the presenter is reading the teleprompter transcript; analyzing the audio content of the presentation using a first machine learning model to obtain a real-time textual translation of the audio content, the first machine learning model being a natural language processing model trained to receive audio content including speech and to translate the audio content into a textual representation of the speech; analyzing the real-time textual representation and the teleprompter transcript with a second machine learning model to obtain transcript position information; and automatically scrolling the teleprompter transcript on the display of the computing device based on the transcript position informatio

Abstract: A computer system is provided, including a processor coupled to a mass storage device that stores instructions, which, upon execution by the processor, cause the processor to store an original string formed of a plurality of characters, perform a wordbreak algorithm on the original string, and tokenize the original string to generate a processed string including a plurality of word tokens separated by spaces. The processor is further configured to generate an offset map between locations within the word tokens in the processed string and corresponding locations in the original string and classify a portion of the processed string as a target. The processor is further configured to identify target characters in the original string that correspond to the target using the offset map and perform a predetermined action on the target characters in the original string.

Abstract: Systems are provided for improving computer security systems that are based on user risk scores. These systems can be used to improve both the accuracy and usability of the user risk scores by applying multiple tiers of machine learning to different the user risk profile components used to generate the user risk scores and in such a manner as to dynamically generate and modify the corresponding user risk scores.

Abstract: A method and system for predicting an intended time interval for a content segment may include receiving a request for natural language processing (NLP) of the content segment, the content segment including one or more temporal expressions, accessing contextual data associated with each of the one or more temporal expressions, decoding the content segment into a program that describes a temporal logic of the content segment based on the one or more temporal expressions, evaluating the program using the contextual data to predict an intended time interval for the content segment, and providing the intended time interval as an output.

Abstract: A method and system for providing one or more suggested application features to a user of an application may include receiving an indication of a user action in a document, accessing contextual document data associated with the document, providing at least one of information about the user action or the contextual document data as input to a machine-learning (ML) model to predict a desired intent for the document, obtaining the predicted desired intent as an output from the ML model, identifying based on the predicted desired intent one or more application features that fulfil the desired intent, and providing data about the one or more application features for display.

Abstract: A user interface may present multiple presentation slides for user selection. Each slide may include one or more shapes, and a shape thread may be associated with each shape on the slide. For a selected slide, the user interface may present one or more shape threads associated with the selected slide. Each shape displayed on the selected slide may be associated with a particular shape thread, and a user may independently adjust one or more slide transition attributes of a shape via the associated shape thread.

Abstract: Techniques for mitigating loss of vaporized working fluid in a two-phase immersion cooling system may be implemented using one or more supplemental condensers that facilitate condensation of vaporized working fluid when the immersion tank is open, and one or more vapor collection points that are in fluid communication with at least one supplemental condenser. One or more fluid displacement devices may be configured to create suction pressure at the one or more vapor collection points. One or more vents may be positioned in the door. The one or more vents may be configured to permit movement of air from outside the immersion tank into an interior portion of the immersion tank without permitting loss of vaporized working fluid. A directional blowing device may be configured to blow a gaseous substance against a computing device in a downward direction as the computing device is being pulled upward out of the immersion tank.

Abstract: A function processing service may receive a request to execute source code. The source code may include instructions to perform a function. The function processing service may determine whether at least one hardware acceleration condition has been satisfied for the function. If at least one hardware acceleration condition has been satisfied, the instructions in the source code may be translated into hardware-specific code corresponding to a hardware circuit. The hardware circuit may be configured based on the hardware-specific code, and the hardware circuit may perform the function. The function processing service may then provide the result obtained from the hardware circuit to the requesting entity.

Abstract: In an implementation, a computing device under the control of a spreadsheet application displays a spreadsheet in a user interface. The application detects a user action in the spreadsheet associated with an unstructured table and responsively drives the computer to display a suggestion component in the user interface. A selection of the component causes the computer to display a preview of a suggested table feature in the user interface.

Abstract: A machine reading comprehension system (MRCS) can analyze a larger-sized document that includes multiple pages to predict an answer to a query. For example, the document can have two, five, tens, or hundreds of pages. The MRCS divides the document into multiple sections with each section including a portion of the document. Each section is processed separately by one or more processing circuitries to determine a score for that section. The score indicates how related the section is to the query and/or a probability that the section provides a possible answer to the query. Once all of the sections have been analyzed, the sections are ranked by their scores and a subset of the ranked sections are processed again to determine a predicted answer to the query.

Abstract: Some embodiments determine automatically which synthesized or otherwise autocreated suggestions for source code editing are presented to developers. Some filter out autocreated coding suggestions that have not been sufficiently endorsed by a developer's team, based on a suggestion trust score. The trust score may reflect the suggestion's adoption in a particular repository or codebase, or affiliation of the suggestion with a library release, or an actual or implied review of the suggestion by team members. Some suggestion filters enhance existing development team code review practices, by offering endorsed suggestions in autocompletion or analysis interfaces of tools and by withholding non-endorsed suggestions from display. Context illustrating the autocreated suggestion's provenance may be displayed to help developers decide whether to adopt the suggestion themselves while editing code.

Abstract: Techniques for securing displayed data on computing devices are disclosed. One example technique includes upon determining that the computing device is unlocked, capturing and analyzing an image in a field of view of the camera of the computing device to determine whether the image includes a human face. In response to determining that the image includes a human face, the technique includes determining facial attributes of the human face in the image via facial recognition and whether the human face is that of an authorized user of the computing device. In response to determining that the human face is not one of an authorized user of the computing device, the technique includes converting user data on the computing device from an original language to a new language to output on a display of the computing device, thereby securing the displayed user data even when the computing device is unlocked.

Abstract: The disclosure is directed towards controlling the persistency of information provided to a service worker. A method includes receiving a response that includes response data. The response is received at a security service and was transmitted by a second computing device in response to receiving an information request from a first computing device. The first computing device implements a service worker. Sensitive data included in the response data is identified. The response includes caching instructions that instruct the service worker to cache the sensitive data at the first computing device. In response to identifying the sensitive data, the caching instructions are updated such that any portion of the response data that the updated caching instructions instruct the service worker to cache at the first computing device excludes the sensitive data. The updated response is transmitted to the first computing device and includes the response data and the updated caching instructions.

Abstract: Techniques are described herein that are capable of evaluating a result of enforcement of access control policies instead of enforcing the access control policies. For instance, a result of enforcement of an access control policy with regard to sign-in processes is evaluated instead of enforcing the access control policy with regard to the sign-in processes. The evaluation includes monitoring access requests that are received during the sign-in processes. Each access request requests access to a resource. The evaluation further includes comparing attributes of each access request against the access control policy that specifies criteria that are to be satisfied as a prerequisite to granting access to the resource to which access is requested by the respective access request. Metadata associated with the sign-in processes is generated instead of enforcing the access control policy with regard to the sign-in processes.