| CPC G06F 21/6218 (2013.01) | 20 Claims |

|
1. A method, comprising:
receiving, by a first identity service, a request to perform an entity operation corresponding to an entity;
determining whether the entity is associated with a first domain corresponding to the first identity service or a second domain corresponding to a second identity service, the second domain associated with entities managed by the second identity service;
in accordance with a determination that the entity is associated with the second domain corresponding to the second identity service, transforming the request to produce a transformed request;
determining whether the request comprises an idempotency token uniquely identifying the entity or the entity operation;
in accordance with a further determination that the request comprises the idempotency token, sending, to the second identity service, an idempotency verification request;
receiving, from the second identity service in response to the idempotency verification request, an indication that the entity corresponding to the entity operation does not exist at a device associated with the second identity service; and
transmitting, via an external proxy, the transformed request to the second identity service, the external proxy configured to route the transformed request based at least in part on the second domain corresponding to the second identity service.
|