Abstract: An information processing system, a service providing system, and a user creation method. The information processing system creates a second user belonging to a second tenant in response to reception of a request for managing the second tenant from a terminal device operated by a first user, the second tenant being different from a first tenant to which the first user belongs.

Abstract: A service providing system, an application usage method, and an information processing system. The service providing system receives from the terminal device, a request for registering a user to a second tenant in which the user can use the application, the request designating identification information of the user registered in the first tenant and identification information of the application, and registers the user and the application in the second tenant as a user who can use the application.

Abstract: An information processing system, a service providing system, and a user creation method. The information processing system creates a second user belonging to a second tenant in response to reception of a request for managing the second tenant from a terminal device operated by a first user, the second tenant being different from a first tenant to which the first user belongs.

Abstract: An information processing system includes multiple information processing apparatuses for providing a multitenant service. The information processing system is configured: to store a user account for each user belonging to one of a plurality of tenants provided by the multitenant service, the user account including a tenant ID of the tenant, and a role representing privilege of the user; to store license information assigned to each of the tenants, the license information including a license type representing a type of task allowed to be performed by the tenant; to receive a first request, from a first user belonging to a first tenant, for performing a task concerning a second tenant; and to determine, based on the role of the first user and the license information assigned to the first tenant, whether the performing of the task concerning the second tenant is allowed.

Abstract: There is provided an information processing device in which an application of an electronic device provides a service to a user, the information processing device including a processor; and a memory that includes instructions, which when executed, cause the processor to execute the following steps: associating the application with a processing flow; associating the processing flow with a scope of authorization of an external service; retrieving the scope of the authorization of the external service required by the processing flow associated with the application; retrieving authorized information representing a scope of authorization of the external service authorized by the user; and providing, for each external service, information indicating whether the external service is authorized, based on a result of comparing the scope of the authorization of the external service required by the processing flow with the scope of the authorization of the external service authorized by the user.

Abstract: An information processing system includes a client device and a server device. The client device includes a transmitter that transmits, to the server device, a request to acquire information for connecting to an external device that provides an external service. The server device includes a storage that stores attributes of accounts of the external service, and the information for connecting to the external device by using the accounts; a receiver that receives the acquisition request from the client device; an identifier that identifies candidate accounts to be used when the client device receives the external service, the candidate accounts being identified based on information elements and the attributes, the information elements being included in the acquisition request and identifying the accounts; and a transmitter that transmits, to the client device, the information for connecting to the external device by using the identified candidate accounts.

Abstract: An information processing apparatus issuing qualification information that is used by a terminal apparatus in using a service includes an authenticating unit configured to receive an authentication request, which includes organization information, domain information, and account information in an on-premises environment, from the terminal apparatus, and search for a user belonging to an organization identified by the organization information from user administration information based on the account information in the on-premises environment in response to a correspondence between the organization information and the domain information inside organization administration information, which causes the organization information and the domain information to correspond; and a qualification information issuing unit configured to issue the qualification information to the searched user.

Abstract: An information processing system including at least one information processing apparatus includes an access control unit configured to receive a request from a service use apparatus to a service providing apparatus, to give, in a case where the request includes information of a completed authentication, based on setup information in which a type of giving information to be given to the request is set, the giving information of the type set in the setup information, and to send the request to the service providing apparatus; and an information providing unit configured to administer the giving information corresponding to the information of the completed authentication, and to provide the giving information corresponding to the information of the completed authentication received from the access control unit to the access control unit.

Abstract: A service providing system includes an application configured to provide a service to a terminal device that has made a service request including use identification information; a creator configured to create group identification information for identifying a group of the use identification information, based on a creation request from the application; an issuer configured to issue the use identification information associated with the group identification information, based on an issue request from the application, the issue request including the group identification information; and a verifier configured to verify the use identification information, based on a verification request from the application, the verification request including the group identification information and the use identification information.

Abstract: An information processing system includes at least one information processing apparatus that includes: a first memory configured to store toggle information that includes entity information indicating either identification information of organizations or identification information of devices and includes identification information of one or more services provided via a network; and a processor coupled to the memory and configured to obtain, upon receiving a service use request from a given device coupled to the information processing system, from the toggle information stored in the first memory, toggle information that includes entity information indicating either identification information of an organization to which a user of the given device belongs or identification information of the given device, generate data for displaying one or more of the services indicated by the identification information of the services included in the obtained toggle information as available, and send the generated data to the

Abstract: An information processing system includes multiple information processing apparatuses for providing a multitenant service. The information processing system is configured: to store a user account for each user belonging to one of a plurality of tenants provided by the multitenant service, the user account including a tenant ID of the tenant, and a role representing privilege of the user; to store license information assigned to each of the tenants, the license information including a license type representing a type of task allowed to be performed by the tenant; to receive a first request, from a first user belonging to a first tenant, for performing a task concerning a second tenant; and to determine, based on the role of the first user and the license information assigned to the first tenant, whether the performing of the task concerning the second tenant is allowed.

Abstract: An information processing apparatus may include a plurality of converting units respectively configured to execute a predetermined data conversion from one data format to another data format, and a control unit. The control unit may coordinate the converting units based on a conversion request to convert electronic data in a first data format into electronic data in a second data format, in order to make the converting units execute a data conversion from the first data format to the second data format.

Abstract: An information processing system includes a service utilizing device and at least one information processing device to provide a service for the service utilizing device. A temporary code issuing unit to issue a temporary code is provided in the information processing device. A device authentication token generation unit is provided in the service utilizing device and generates a device authentication token by using the temporary code obtained from the information processing device. A device authentication ticket issuing unit is provided in the information processing device and verifies whether the device authentication token obtained from the service utilizing device is valid by using the temporary code and issues a device authentication ticket depending on a verification result. An access unit is provided in the service utilizing device and accesses a resource in the information processing device by using the device authentication ticket obtained from the information processing device.

Abstract: There is provided an information processing device in which an application of an electronic device provides a service to a user, the information processing device including a processor; and a memory that includes instructions, which when executed, cause the processor to execute the following steps: associating the application with a processing flow; associating the processing flow with a scope of authorization of an external service; retrieving the scope of the authorization of the external service required by the processing flow associated with the application; retrieving authorized information representing a scope of authorization of the external service authorized by the user; and providing, for each external service, information indicating whether the external service is authorized, based on a result of comparing the scope of the authorization of the external service required by the processing flow with the scope of the authorization of the external service authorized by the user.

Abstract: A data processing system including a data processing apparatus, includes a user data storing unit that stores user data of a user who uses a first service, the user data including first authentication data used for logging in the first service and user specifying data; a determining unit that determines, when the user who uses the first service sets second authentication data used for logging in a second service different from the first service, user specifying data usable as the second authentication data from the user specifying data included in the user data; and a management unit that sets the user specifying data determined to be usable as the second authentication data in the user data of the user who uses the first service as the second authentication data, and manages the user data as user data of the user who uses the first service and the second service.

Abstract: An information processing system includes an information processing device, and an electronic device to utilize a service provided from the information processing device. A service delivery unit provides the service for the electronic device. An information management unit manages license information of the service, generates use permission information and sends the generated use permission information to the electronic device. An execution management unit manages an execution request of the service specifying the use permission information of the service. An execution unit determines whether to have a use authority of a function of the electronic device utilized by the service based on contents of the license included in the use permission information of the service and executes the service by utilizing the function of the electronic device upon determining that the use authority of the function of the electronic device utilized by the service is present.

Abstract: An information processing apparatus issuing qualification information that is used by a terminal apparatus in using a service includes an authenticating unit configured to receive an authentication request, which includes organization information, domain information, and account information in an on-premises environment, from the terminal apparatus, and search for a user belonging to an organization identified by the organization information from user administration information based on the account information in the on-premises environment in response to a correspondence between the organization information and the domain information inside organization administration information, which causes the organization information and the domain information to correspond; and a qualification information issuing unit configured to issue the qualification information to the searched user.

Abstract: An information processing system includes an electronic device; a service providing system including information processing devices connected to the image forming device via a network; a single sign on unit configured to send a request from the electronic device to the service providing system, to acquire authentication information of an external service that performs a process in cooperation with an application operating in the image forming device; an access control unit configured to receive the request from the single sign on unit whose validity has been confirmed, based on a result obtained by using identification information of the single sign on unit, in the service providing system; and a data management unit configured to acquire the authentication information of the external service from a storage unit based on the request from the single sign on unit that is valid, and to provide the authentication information of the external service to the single sign on unit via the access control unit.

Abstract: An information processing system includes a client device and a server device. The client device includes a transmitter configured to transmit, to the server device, a request to acquire information for connecting to an external device that provides an external service. The server device includes a storage configured to store attributes of accounts of the external service, and the information for connecting to the external device by using the accounts; a receiver configured to receive the acquisition request from the client device; an identifier configured to identify candidate accounts to be used when the client device receives the external service, the candidate accounts being identified based on information elements and the attributes, the information elements being included in the acquisition request and identifying the accounts; and a transmitter configured to transmit, to the client device, the information for connecting to the external device by using the identified candidate accounts.

Abstract: A service providing system includes an application configured to provide a service to a terminal device that has made a service request including use identification information; a creator configured to create group identification information for identifying a group of the use identification information, based on a creation request from the application; an issuer configured to issue the use identification information associated with the group identification information, based on an issue request from the application, the issue request including the group identification information; and a verifier configured to verify the use identification information, based on a verification request from the application, the verification request including the group identification information and the use identification information.