Abstract: In an example embodiment, a solution is provided that performs the rotation of access keys of cloud components that are shared in on-premise software components (such as in a hybrid deployment environment) such that a minimal number of keys are needed. The solution also provides for having a specified validity of the access key, so that the hybrid or on-premise components can retain access to the software components while the new access keys are being generated.

Abstract: An ingress component may receive, from a client, an HTTP URL and HTTP header information for an incoming protocol message (e.g., an AS2 message). An endpoint selector may determine the HTTP header information along with an endpoint address associated with the incoming protocol message. Based on the incoming HTTP header information and the endpoint address of the incoming protocol message, the endpoint selector may dynamically resolve an appropriate deployed endpoint and output an indication of the dynamically resolved appropriate deployed endpoint. A runtime component of an integration platform can then execute the incoming protocol message and interface with the appropriate deployed endpoint.

Abstract: According to some embodiments, methods and systems may include a data storage device that contains user identifiers and associated entitlement values for a plurality of tenants of a cloud computing environment. A provisioning application platform processor may receive a user request for an integration service and access the data storage device. The provisioning application platform processor may then transmit at least one entitlement value to a platform resource manager processor to facilitate creation of a plurality of microservices resulting in implementation of the integration service for the user.

Abstract: Methods and systems may be associated with a cloud computing environment. A provisioning application data store may contain information associated with services representing a plurality of multi-tenant cloud applications including, for a first SaaS application, indications that a first tenant qualifies for early software updates and has opted to receive early software updates. A cloud platform provisioning framework may determine that a new software update to the first application is available and is scheduled to be installed within a pre-determined time period (e.g., one day or week). The framework may then access the provisioning application data store to verify that the first tenant qualifies for early software updates and has opted to receive early software updates. As a result of the verification, the cloud platform provisioning framework may automatically install the new software update to the first application for the first tenant prior to the scheduled installation.

Abstract: Methods and systems may be associated with a cloud computing environment. A provisioning application data store may contain information associated with services representing a plurality of multi-tenant cloud applications including, for a first SaaS application, indications that a first tenant qualifies for early software updates and has opted to receive early software updates. A cloud platform provisioning framework may determine that a new software update to the first application is available and is scheduled to be installed within a pre-determined time period (e.g., one day or week). The framework may then access the provisioning application data store to verify that the first tenant qualifies for early software updates and has opted to receive early software updates. As a result of the verification, the cloud platform provisioning framework may automatically install the new software update to the first application for the first tenant prior to the scheduled installation.

Abstract: According to some embodiments, methods and systems may include a data storage device that contains user identifiers and associated entitlement values for a plurality of tenants of a cloud computing environment. A provisioning application platform processor may receive a user request for an integration service and access the data storage device. The provisioning application platform processor may then transmit at least one entitlement value to a platform resource manager processor to facilitate creation of a plurality of microservices resulting in implementation of the integration service for the user.

Abstract: According to some embodiments, methods and systems may include a data storage device that contains user identifiers and associated entitlement values for a plurality of tenants of a cloud computing environment. A provisioning application platform processor may receive a user request for an integration service and access the data storage device. The provisioning application platform processor may then transmit at least one entitlement value to a platform resource manager processor to facilitate creation of a plurality of microservices resulting in implementation of the integration service for the user.

Abstract: Techniques are described for management of authorization (e.g., OAuth) clients on a distributed computing environment (e.g., platform), through a deployment descriptor of the application(s) hosted in the environment. The deployment descriptor can be provided with the deployed application, and describes various permissions for access to services provided by the platform and scope(s) of such access. Credentials can be generated for each subscriber of the application, according to the scope(s) indicated in the descriptor, and an authorization client can be generated that describes the various subscriptions of the various access and access scope(s) associated with each subscription. The authorization client is available on the platform and accessed at application runtime to control the application's access to the various services available on the platform.

Abstract: According to some embodiments, methods and systems may include a data storage device that contains user identifiers and associated entitlement values for a plurality of tenants of a cloud computing environment. A provisioning application platform processor may receive a user request for an integration service and access the data storage device. The provisioning application platform processor may then transmit at least one entitlement value to a platform resource manager processor to facilitate creation of a plurality of microservices resulting in implementation of the integration service for the user.

Abstract: Techniques are described for management of authorization (e.g., OAuth) clients on a distributed computing environment (e.g., platform), through a deployment descriptor of the application(s) hosted in the environment. The deployment descriptor can be provided with the deployed application, and describes various permissions for access to services provided by the platform and scope(s) of such access. Credentials can be generated for each subscriber of the application, according to the scope(s) indicated in the descriptor, and an authorization client can be generated that describes the various subscriptions of the various access and access scope(s) associated with each subscription. The authorization client is available on the platform and accessed at application runtime to control the application's access to the various services available on the platform.