Abstract: In a cloud computing environment, a cross-tenant access security measure monitors conditional access policies for changes or additions that hamper or threaten an authorized access from an assistant tenant user to a focus tenant. Some cross-tenant access security tracks role assignments to detect rogue roles, or detect hampering role changes. In some cases, focus tenant events and assistant tenant events are correlated in an audit. In some cases, the authorized access is a zero standing time bound access. In some cases, the authorized access is constrained to an IP address range, or constrained to login from a managed device, or both. In some cases, assets are excluded from managed response remediation actions. In some, managed response is modulated by product-specific Role Based Access Control. In some, repeated logins are avoided, to permit faster managed responses.

Abstract: A distributed application deployment engine uses declarative deployment data that describes deployment characteristics for application modules, and potential target environments. The engine uses the deployment data to potentially match a module to a deployment target. At some point, the modules may then be actually deployed on the identified deployment target. This may be performed for multiple modules in the distributed application, thereby deploying the distributed application in a distributed environment.

Abstract: An interactive user interface for displaying mappings between modules of a distributed application and deployment targets in a distributed environment. The user interface represents module items, deployment target items, and correlation items that represent various mappings of module items to deployment target items. In some cases, the manner in which each of these items is displayed may be altered in response to user input. The correlation itself may also be potentially altered in response to user input. Multiple solutions may be displayed in which there are different mappings of modules to target solutions.

Abstract: The present invention extends to methods, systems, and computer program products for distributed behavior controlled execution of modeled applications. Embodiments of the invention facilitate the interoperation of a central data store along with various peer-to-peer functionalities. Thus, distributed applications can be executed in an environment that utilizes advantages of both a central data store and peer-to-peer messaging. A read-only portion of a centralized data store can be used to provide some behavior control over various processing systems during execution of a distributed software application. Thus, embodiments of the invention can be used to form a policy-driven collective of nodes forming a distributed, decentralized run-time for model-based applications. Utilizing a cooperating collective of nodes that comply with centralized polices and execute applications over a peer-to-peer fabric permits a distributed application runtime to accommodate distribution and decentralization on a large scale.

Abstract: Various technologies and techniques are disclosed that merge components on a design surface. The system receives input from a user to add components or clauses to a design surface and analyzes the components to determine if some of the components can be merged. If the system identifies components that can be merged, then the system merges the identified components to reduce the number of components present on the design surface. The system determines that some components can be merged if the components meet the same criteria, such as having components that are equivalent and that have the same number of incoming paths or the same number of outgoing paths. The system provides a visual indicator on the design surface to indicate that components are being merged. The system provides an undo feature to allow the user to undo the component merging when desired.

Abstract: A system, method and user interface facilitating hierarchical (e.g., tree-based) rule composition with natural language inline editing. For example, the system can combine a familiar hierarchical structure, such as a computer tree, and inline editing of natural language based logical expression(s) to provide a general purpose logical expression builder. In one example, the system facilitates construction and/or editing of business rule(s) based, at least in part, upon parameterized format string definition(s) and composable vocabulary definition(s). The system includes a rule composer and a display component. The rule composer facilitates creation, modification and/or viewing of a rule, for example, based upon a user input. The display component displays hierarchical information associated with the rule.

Abstract: An interactive user interface for displaying mappings between modules of a distributed application and deployment targets in a distributed environment. The user interface represents module items, deployment target items, and correlation items that represent various mappings of module items to deployment target items. In some cases, the manner in which each of these items is displayed may be altered in response to user input. The correlation itself may also be potentially altered in response to user input. Multiple solutions may be displayed in which there are different mappings of modules to target solutions.

Abstract: A distributed application deployment engine uses declarative deployment data that describes deployment characteristics for application modules, and potential target environments. The engine uses the deployment data to potentially match a module to a deployment target. At some point, the modules may then be actually deployed on the identified deployment target. This may be performed for multiple modules in the distributed application, thereby deploying the distributed application in a distributed environment.

Abstract: The present invention extends to methods, systems, and computer program products for distributed behavior controlled execution of modeled applications. Embodiments of the invention facilitate the interoperation of a central data store along with various peer-to-peer functionalities. Thus, distributed applications can be executed in an environment that utilizes advantages of both a central data store and peer-to-peer messaging. A read-only portion of a centralized data store can be used to provide some behavior control over various processing systems during execution of a distributed software application. Thus, embodiments of the invention can be used to form a policy-driven collective of nodes forming a distributed, decentralized run-time for model-based applications. Utilizing a cooperating collective of nodes that comply with centralized polices and execute applications over a peer-to-peer fabric permits a distributed application runtime to accommodate distribution and decentralization on a large scale.

Abstract: A method of generating code that permits client access to a business process orchestration running on a server as a web service using the Simple Object Access Protocol (SOAP). Business process orchestrations in XLANG are converted to a web service implementation description from which the Web services code is generated. During runtime, when a SOAP request message comes into the server, it is passed to the target web method. The message is then passed to a Web services adapter that submits the request for further processing by the backend system. The response is forwarded to the Web services adapter, which returns the response as a SOAP response message to the client.

Abstract: A method of providing an extension mechanism to an schema editor such that custom properties may be defined for nodes within an XSD schema. The custom properties allow the schema editor to define characteristics of non-XML data within XSD schemas in a standard fashion. The XSD schemas may then be used to parse and validate instance data that is not natively in XML format, such as flat files.

Abstract: Mapping between a source object and a destination or target object uses techniques and functoids that provide an auto-linking feature in which mappings are automatically provided based solely on source and target field names, or, ignoring field names, field locations within hierarchy. Functoids provide support for callout to programming artifacts, such as custom programming logic embedded in .NET assemblies or custom XSLT, and table-looping to generate and map data into a target document even though that data did not exist in the map input.