1. A computer-implemented method comprising: creating a first identity domain through a shared identity management system; associating a first plurality of services with the first identity domain; sharing, among the first plurality of services, identities of a first set of users managed by the shared identity management system; creating, through the shared identity management system, a second identity domain that is isolated from the first identity domain; associating a second plurality of services with the second identity domain; and sharing, among the second plurality of services, identities of a second set of users managed by the shared identity management system.