US 11,687,378 B2
Multi-tenant identity cloud service with on-premise authentication integration and bridge high availability
Ashish Bhargava, Uttar Padesh (IN); Gary Cole, Austin, TX (US); and Gregg Wilson, Austin, TX (US)
Assigned to ORACLE INTERNATIONAL CORPORATION, Redwood Shores, CA (US)
Filed by Oracle International Corporation, Redwood Shores, CA (US)
Filed on May 18, 2020, as Appl. No. 16/876,572.
Claims priority of provisional application 62/899,888, filed on Sep. 13, 2019.
Claims priority of application No. 201941037066 (IN), filed on Sep. 14, 2019.
Prior Publication US 2021/0081252 A1, Mar. 18, 2021
Int. Cl. G06F 9/50 (2006.01); G06F 12/0831 (2016.01); H04L 9/40 (2022.01); H04L 67/5682 (2022.01)
CPC G06F 9/5072 (2013.01) [G06F 12/0831 (2013.01); H04L 63/02 (2013.01); H04L 63/0846 (2013.01); H04L 67/5682 (2022.05)] 19 Claims
OG exemplary drawing
 
1. A method of operating a multi-tenant cloud system, the method comprising:
receiving a request for an authenticate action for a user, the request received at the multi-tenant cloud system from an on-premise active directory via a firewall;
in response to the request, at the multi-tenant cloud system creating an authenticate target action;
registering a cache listener at the multi-tenant cloud system for a cache comprising a filter to listen for a target action response that is responsive to the authenticate target action, the filter listing a plurality of bridges assigned to the on-premise active directory, each bridge mapped to a same active directory domain, the cache listener generating a cache callback when a cache event occurs;
randomly selecting one of the plurality of bridges and sending the authenticate target action to the active directory from the multi-tenant cloud system via the selected bridge, each of the plurality of bridges comprising a different bridge identifier and coupled to the multi-tenant cloud system and the on-premise active directory, each bridge sending a count of records it can process with the request;
waiting for the cache callback; and
at the cache callback, receiving at the multi-tenant cloud system via the on-premise active directory a target action response comprising a result of the authenticate action.