A 
system and method for providing security for newly spawned spaces in a 
distributed computing environment. A 
client may access a first space service. The creation of a second space may be requested, such as by the 
client sending an appropriate request to an interface of the first space. In one embodiment, the first space and second space may share a common 
storage model, storage facility, and / or 
XML schema. The second space may initially be configured to permit access only to the requesting 
client. In one embodiment, a root 
authentication token is created for the second space. An 
authentication service associated with the second space may be initialized, whereby the second space is configured to permit access only to a client holding the root 
authentication token. The root authentication token may be sent to the requesting client or service. The requesting client may send the root authentication token to a second client. The second client may then access the second space by sending to the second space at least one of the messages specified in the second schema along with the root authentication token. The requesting client may also modify the initially configured 
security policy of the second space such that the second space is configured to permit access to other clients.