Abstract: After receiving a request to authenticate a user of a system, which is local to the user and connected to a cloud's platform, the cloud's local identity provider authenticates the user based on identifying the user's cloud identity from cloud identities associated with subscriptions to access an application. The cloud's usage service authorizes the cloud-authenticated user to access the application based on the subscription associated with the user's cloud identity. The system matches the user's system identity with the user's cloud identity. If the system is not connected to the cloud's platform, the system's identity manager authenticates the user based on identifying the user's system identity from system identities matched with cloud identities. The system's usage service authorizes the system-authenticated user to access the application based on the subscription associated with the cloud identity matched with the user's system identity.

Abstract: Disclosed are techniques for synchronizing software objects in one namespace with software objects in another namespace. When a change is detected in the first namespace (such as the addition, deletion, or movement of a software object), only as much information as is needed to characterize the change is sent to the second namespace. The second namespace then replicates the changed status of the first namespace. In one embodiment of the invention, an Archestra namespace is synchronized with an InSQL namespace by applying the public/private namespace capability of InSQL.