Abstract: According to examples, an apparatus may include a processor and a memory on which are stored machine-readable instructions that when executed by the processor, may cause the processor to receive information regarding a property of a data resource and to calculate a score associated with the data resource based on the received information regarding the property. The score may correspond to a probability that the data resource is to have a first type of accessibility. The processor may compare the calculated score to a predefined threshold value and, based on the comparison of the calculated score to the predefined threshold value, may output an indication that accessibility to the data resource should be set to the first type of accessibility or a second type of accessibility.

Abstract: According to examples, an apparatus may include a processor and a memory on which are stored machine-readable instructions that when executed by the processor, may cause the processor to receive information regarding a property of a data resource and to calculate a score associated with the data resource based on the received information regarding the property. The score may correspond to a probability that the data resource is to have a first type of accessibility. The processor may compare the calculated score to a predefined threshold value and, based on the comparison of the calculated score to the predefined threshold value, may output an indication that accessibility to the data resource should be set to the first type of accessibility or a second type of accessibility.

Abstract: Methods, systems and computer program products are provided for cloud-based data access control. Data sensitivity levels are assigned to data. User sensitivity levels are assigned to users. A query sensitivity level to data may be dynamically calculated for a query during query processing. User access to the data may be determined by comparing the calculated query sensitivity level to a user sensitivity level. A query result for the query may be provided to a user that has a user sensitivity level equal to or greater than the query sensitivity level, while a modified or alternate query result (e.g., empty set) may be provided to the user if the user sensitivity level is lower than the query sensitivity level.

Abstract: Single sign-on identity management between local and cloud-based systems is provided. A remote or cloud-based authentication endpoint is registered as a local device, service or resource in a user's local directory services system. A local device and associated user requesting access to cloud-based resources will then see the authentication endpoint as an internal (inside the enterprise) server and may supply an authentication ticket which includes on-premises log-in or sign-on identity for the user. The remote or cloud-based authentication endpoint may then validate the authentication ticket, and the user may then access devices, applications and services operated in association with the remote or cloud-based authentication endpoint without a second or separate log-in or sign-on and without use of additional authentication equipment at the user's enterprise network.

Abstract: Single sign-on identity management between local and cloud-based systems is provided. A remote or cloud-based authentication endpoint is registered as a local device, service or resource in a user's local directory services system. A local device and associated user requesting access to cloud-based resources will then see the authentication endpoint as an internal (inside the enterprise) server and may supply an authentication ticket which includes on-premises log-in or sign-on identity for the user. The remote or cloud-based authentication endpoint may then validate the authentication ticket, and the user may then access devices, applications and services operated in association with the remote or cloud-based authentication endpoint without a second or separate log-in or sign-on and without use of additional authentication equipment at the user's enterprise network.