Accessing an application through application clients and web browsers

A non-transitory computer readable medium storing instructions, which when executed by at least one processor cause a computer to:

• deploy an authorization server to control access of one or more application clients to a plurality of protected applications;
• receive, at a protected application of the plurality of protected applications, a request comprising an access token from an application client of the one or more application clients which is associated with a user, wherein the access token is issued by the authorization server during authorization of the application client for accessing the protected application;
• upon determining that the access token is valid at the protected application, retrieve, from the authorization server, grant information comprising intersecting scopes of rights between Open Authorization (OAuth) rights requested to be granted to the application client at the authorization server, rights mapped to a Java role of the user at the authorization server, and rights mapped to the protected application, wherein the intersecting scopes of rights comprises an overlap between corresponding scopes of the rights of the OAuth rights requested to the granted, the rights mapped to the Java role of the user, and the rights mapped to the protected application;
• and
• establish a direct session between the application client and the protected application based on the intersecting scopes of rights.

A computing system comprising:

• a hardware processor configured to deploy an authorization server to control access of one or more application clients to a plurality of protected applications;
• and
• a network communicator configured to receive, via a protected application of the plurality of protected applications, a request comprising an access token from an application client of the one or more application clients which is associated with a Java user, wherein the access token is issued by the authorization server during authorization of the application client for accessing the protected application,
• wherein the hardware processor is further configured to retrieve grant information comprising intersecting scopes of rights between Open Authorization (OAuth) rights requested to be granted to the application client at the authorization server, and rights mapped to a Java role of the Java user at the authorization server, and rights mapped to the protected application, wherein the intersecting scopes of rights comprises an overlap between corresponding scopes of the rights of the OAuth rights requested to the granted, the rights mapped to the Java role of the user, and the rights mapped to the protected application, and
• establish a direct session between the application client and the protected application based on the intersecting scopes of rights.