1. A computer implemented method for provisioning user access to a business application within a framework of an identity management system, the computer implemented method comprising: providing an interface layer to map respective attributes, permissions, and resource accounts in a data repository needed to represent access to business applications via a managed service in the identity management system; defining user entitlements on a user account associated with the managed service; and provisioning user access to the business applications via the managed service in the identity management system upon user request.