Method and apparatus for federated single sign on using authentication broker
AssigneeEMC IP Holding Company LLC
InventorManoj K. Jain
Life of this patent
Estimating the term…
Abstract
Example embodiments of the present invention provide a method, an apparatus, and a computer program product for brokering establishment of a trusted relationship between a first domain and a second domain. The method includes receiving, from a first domain, a request to establish a trusted relationship with a second domain and brokering establishment of the trusted relationship between the first domain and the second. Other example embodiments include brokering authenticated access for a client in the first domain to a resource in the second domain according to the established trusted relationship.
Claims19
A computer-implemented method for execution in a system comprising a plurality of domains, a plurality of authentication servers, and an authentication broker layer spanning the plurality of domains, the method comprising:
- receiving, from a first domain, a request to establish a trusted relationship through a firewall with a second domain, wherein the first domain and the second domain use dissimilar open authentication standards that do not interoperate with each other;
- brokering establishment of the trusted relationship, via the authentication broker layer, between the first domain and the second domain, wherein the brokering establishment includes encapsulating the request in a format according, at least in part, to the open authentication standard of the second domain, wherein the request is encrypted;
- and
- brokering authenticated access for a client in the first domain to a resource in the second domain according to the established trusted relationship.
A system comprising:
- an authentication server configured to receive, from a first domain, a request to establish a trusted relationship through a firewall with a second domain, wherein the first domain and the second domain use dissimilar open authentication standards that do not interoperate with each other;
- and
- an authentication broker configured to broker establishment of the trusted relationship between the first domain and the second domain and to broker authenticated access for a client in the first domain to a resource in the second domain according to the established trusted relationship, wherein the brokering establishment includes encapsulating the request in a format according, at least in part, to the open authentication standard of the second domain, and wherein the request is encrypted.
A computer program product including a non-transitory computer-readable storage medium encoded with computer program code that, when executed on a processor of a computer, causes the computer to broker establishment of a trusted relationship between a first domain and a second domain, the computer program product comprising:
- computer program code for receiving, from the first domain, a request to establish the trusted relationship through a firewall with the second domain, wherein the first domain and the second domain use dissimilar open authentication standards that do not interoperate with each other;
- and
- computer program code for brokering establishment of the trusted relationship, via an authentication broker between the first domain and the second domain and for brokering authenticated access for a client in the first domain to a resource in the second domain according to the established trusted relationship, wherein the brokering establishment includes encapsulating the request in a format according, at least in part, to the open authentication standard of the second domain, and wherein the request is encrypted.
Dependencies are inferred from the claim text.