Abstract: The disclosed technology teaches a computer-implemented method of enabling identity governance administration to examine the state of identity management objects at an arbitrary prior time. The method includes maintaining a data store of identity management objects used for identity governance administration, including specification of user roles from which permissions or authorizations derive and recording in the data store copies of identity management objects with an as-of time stamp at each creation, change and deletion of each identity management object. Also included is retaining time-stamped versions of the objects for a queryable time window. The method also includes receiving a query with an as-of time criteria for at least some of the identity management objects and returning responsive objects from which the permissions or authorizations were derived at the as-of-time. Responding to the query with the responsive objects that correspond to the as-of time criteria in the query is also disclosed.

Abstract: The disclosed technology teaches a method of coalescing candidate roles discovered by role mining with active roles that preexisted the role mining, including calculating pairwise proximities between the candidate roles and the active roles by counting differences between pairs over attribute lists for entitlement, driving factors and access patterns, with a penalty for lack of overlap between attribute lists to produce a total difference score. Also included is selecting pairs of candidate and active roles that have a low total difference scores that also are below a threshold. For the selected pairs, the disclosed method includes proposing to assign entitlements from the active role to the paired candidate role, and receiving user feedback on whether to proceed with merging of candidate roles in the pair into corresponding active roles, while retaining entitlements of the active roles.

Abstract: The disclosed technology teaches aggregating 3rd-party risk measures during an authentication journey, including providing a risk measure aggregation node, a JSON transform, and a configuration for 3rd-party risk measures to request. Responsive to invocation of the risk measure aggregation node during the authentication journey, the method includes setting a timer for receipt of a configured 3rd-party risk measure, wherein expiration of the timer causes the risk measure aggregation node to stop waiting for a timed-out 3rd party risk measure provider and requesting the configured 3rd-party risk measures. Upon receiving at least some of the requested 3rd-party risk measures, included is applying the JSON transform to aggregate the returned 3rd-party risk measures into an aggregate score, and the risk measure aggregation node providing to another node in the authentication journey an aggregated score taking into account the configured 3rd-party risk measures received prior to expiration of the timer.

Abstract: Systems and methods for providing location estimates of user equipment to be used in location based services are provided. Data collected from users in a local radio access network (RAN), such as an Enterprise RAN (E-RAN), as well as configuration information of the local RAN/E-RAN is siphoned from the system and utilized in conjunction with a location engine to provide a high accuracy location estimate for users in an indoor environment. The siphoned data is provided in a real-time location stream to the location engine.

Abstract: Systems and methods for providing location estimates of user equipment to be used in location based services are provided. Data collected from users in a local radio access network (RAN), such as an Enterprise RAN (E-RAN), as well as configuration information of the local RAN/E-RAN is siphoned from the system and utilized in conjunction with a location engine to provide a high accuracy location estimate for users in an indoor environment. The siphoned data is provided in a real-time location stream to the location engine.