Abstract
In a multi-tenant managed security service that executes response actions through third-party tools on behalf of customer tenants, the credential for each third-party tool is never held by the service provider. It resides only in the customer tenant's own secret store. At action time, the provider, using a service identity the customer has explicitly consented to, resolves the customer from a management record, authenticates cross-tenant into the customer's secret store, retrieves the credential, exchanges it with the third-party tool, and never persists it provider-side. Capability is signaled fail-closed: a missing or unresolvable configuration returns a distinct "not configured" status that upstream gates consume to withhold the corresponding action, and a failed secret read likewise withholds the action. The customer revokes all access unilaterally by removing a single role assignment on their side.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Recommended Citation
AlpenShield GmbH, "Customer-Tenant-Custody of Third-Party Credentials for Cross-Tenant Security Automation, with Fail-Closed Capability Signaling", Technical Disclosure Commons, ()
https://www.tdcommons.org/dpubs_series/11428