Abstract: This disclosure relates to a context enforcement system that efficiently and securely protects tenant context information that travels across microservices in a multi-tenant distributed cloud computing system and protects against data leaks that often occur in conventional microservice management systems. For example, the context enforcement system ensures secure external and internal communications and context isolation by providing various shared library functions to microservices of a multi-tenant distributed cloud computing system. Additionally, the shared library provided by the context enforcement system improves the efficiency of the multi-tenant distributed cloud computing system by allowing microservices to focus on target operations rather than also maintaining and performing additional redundant functions.

Abstract: Methods, systems, and computer storage media for providing cloud access management using an access orchestration engine in a cloud access management system. Cloud access management provides access to a remote client of a consumer-identity-supported tenant environment of an organization. In operation, a consumer identity of a user is accessed. The consumer identity is approved for access to the consumer-identity-supported tenant environment. Based on accessing the consumer identity, access orchestration operations are executed for the remote client using remote client access resources, organization resources, and consumer identity resources.