Abstract: In one embodiment, a method includes maintaining a domain information cache. The method further includes receiving credentials from a client system. The credentials correspond to a user of the client system. The method also includes storing the credentials in a security cookie. In addition, the method includes, based, at least in part, on the domain information cache, resolving the credentials to an authentication server associated with a domain of the user. Also, the method includes authenticating, using the credentials, an identity of the user with the authentication server. Additionally, the method includes, responsive to successful authentication, building a list of groups and users to which the user belongs. Moreover, the method includes compiling a list of authorized resources to which the user has access. In addition, the method includes providing the list of authorized resources to the client system.

Abstract: In one embodiment, a method is performed on a multitenant shared-resources system for each managed domain of a plurality of managed domains. The method includes collecting configuration data for the managed domain via a configuration interface provided to an authorized user. The method further includes identifying domain-information sources for the managed domain based, at least in part, on the configuration data. The domain-information sources include a catalog server and an authentication server. In addition, the method includes acquiring domain information for the managed domain from at least one domain-information source of the domain-information sources. Further, the method includes enumerating users for the managed domain. The method also includes assigning at least a portion of the users to shared resources maintained by the multitenant shared-resources system. At least a portion of the plurality of domains have independent security boundaries.