User impersonation/delegation in a token-based authentication system
AssigneeInternational Business Machines Corporation
InventorsMichael John Fork, Vincent Edmund Price
Life of this patent
Estimating the term…
Loading patent…
AssigneeInternational Business Machines Corporation
InventorsMichael John Fork, Vincent Edmund Price
Estimating the term…
A “trusted service” establishes a trust relationship with an identity provider and interacts with the identity provider over a trusted connection. The trusted service acquires a token from the identity provider for a given user (or set of users) without having to present the user's credentials. The trusted service then uses this token (e.g., directly, by invoking an API, by acquiring another token, or the like) to access and obtain a cloud service on a user's behalf even in the user's absence. This approach enables background services to perform operations within a hosted session (e.g., via OAuth-based APIs) without presenting user credentials or even having the user present.
An identity provider apparatus, comprising:
A method, operable within an identity provider, comprising:
A computer program product in a non-transitory computer readable medium for use in a data processing system, the computer program product holding computer program instructions which, when executed by the data processing system serving as an identity provider, perform a set of operations, comprising:
Dependencies are inferred from the claim text.