Abstract: Embodiments operate a multi-tenant cloud system for a plurality of user accounts. Embodiments receive a create request from a client system to provision a new account for a user. Embodiments determine that the create request has failed and initiates a rollback of the create request. Embodiments determine that the rollback has failed and initiates a new rollback in response to a status request from the client system.

Abstract: Embodiments operate a multi-tenant cloud system for a plurality of user accounts. Embodiments receive a create request from a client system to provision a new account for a user. Embodiments determine that the create request has failed and initiates a rollback of the create request. Embodiments determine that the rollback has failed and initiates a new rollback in response to a status request from the client system.

Abstract: Tenant and service management for an Identity Cloud Service (IDCS) is provided. A request is received, from a Tenant Automation System (TAS) over a network, to create an IDCS service instance for a tenant. The IDCS service instance is created using a task execution framework that includes a task orchestrator and a plurality of synchronous tasks, the task orchestrator instantiating the tasks, controlling the tasks and generating a response to the request. A response, indicating that the IDCS service instance for the tenant has been created, is sent to the TAS over the network.

Abstract: A method for providing an on-premises virtual directory system for an LDAP (Lightweight Directory Access Protocol) to SCIM (System for Cross-domain Identity Management) proxy service is provided. The method includes providing an LDAP Directory Information Tree (DIT) including LDAP DIT entries, providing a SCIM directory including SCIM resource entries, migrating the LDAP DIT entries to the SCIM directory, creating a virtual LDAP hierarchy based on LDAP DIT hierarchical information stored in the SCIM directory, and displaying a graphical user interface (GUI) for a directory services application that includes a data tree pane that depicts the virtual LDAP hierarchy. Creating the virtual LDAP hierarchy includes storing the LDAP DIT hierarchical information in the SCIM directory by mapping LDAP containers to SCIM user or SCIM group attributes, mapping LDAP containers to special marker SCIM groups, mapping LDAP user DNs to SCIM user externalIDs, or mapping LDAP group DNs to SCIM group externalIDs.

Abstract: Tenant and service management for an Identity Cloud Service (IDCS) is provided. A request is received, from a Tenant Automation System (TAS) over a network, to create an IDCS service instance for a tenant. The IDCS service instance is created using a task execution framework that includes a task orchestrator and a plurality of synchronous tasks, the task orchestrator instantiating the tasks, controlling the tasks and generating a response to the request. A response, indicating that the IDCS service instance for the tenant has been created, is sent to the TAS over the network.

Abstract: A method for providing an on-premises virtual directory system for an LDAP (Lightweight Directory Access Protocol) to SCIM (System for Cross-domain Identity Management) proxy service is provided. The method includes providing an LDAP Directory Information Tree (DIT) including LDAP DIT entries, providing a SCIM directory including SCIM resource entries, migrating the LDAP DIT entries to the SCIM directory, creating a virtual LDAP hierarchy based on LDAP DIT hierarchical information stored in the SCIM directory, and displaying a graphical user interface (GUI) for a directory services application that includes a data tree pane that depicts the virtual LDAP hierarchy. Creating the virtual LDAP hierarchy includes storing the LDAP DIT hierarchical information in the SCIM directory by mapping LDAP containers to SCIM user or SCIM group attributes, mapping LDAP containers to special marker SCIM groups, mapping LDAP user DNs to SCIM user externalIDs, or mapping LDAP group DNs to SCIM group externalIDs.