| CPC H04L 63/0884 (2013.01) [G06F 21/31 (2013.01); G06F 21/45 (2013.01); G06Q 10/10 (2013.01); H04L 63/0807 (2013.01); H04L 63/0815 (2013.01); H04L 61/4523 (2022.05); H04L 63/0892 (2013.01); H04L 63/20 (2013.01)] | 17 Claims |

|
1. A method, comprising:
receiving, from a device that manages a directory that comprises a mapping between a plurality of users and a plurality of information technology (IT) resources, at least a subset of a first portion of the directory, wherein:
the first portion of the directory comprises references to a first set of IT resources of the plurality of IT resources associated with a first organization, wherein the first organization comprises a first set of users of the plurality of users, and
a second portion of the directory comprises references to a second set of IT resources of the plurality of IT resources associated with a second organization, the second organization comprising a second set of users of the plurality of users;
authenticating, using the subset of the first portion of the directory, a user of the first organization for access to an IT resource of the first set of IT resources, wherein the subset of the first portion of the directory comprises references to the IT resource that comprise a permission for the user of the first organization to access the IT resource, and wherein the authenticating is based at least in part on an attempt of the user of the first organization to access a functionality of the IT resource; and
providing, to the IT resource based at least in part on authenticating the user of the first organization, an indication that the user of the first organization is assigned the permission.
|