Managing access to protected resources (applications, services and their data) for users in the extended enterprise (which consists of employees, temporary employees and contractors, business partners, and customers) can be a daunting task. New applications and services are continuously being developed and deployed; new users join the extended enterprise, change roles within it, and eventually…