Using credentials stored in different directories to access a common endpoint
AssigneeAmazon Technologies, Inc.
InventorsGaurang Pankaj Mehta, Neelam Satish Agrawal, Lawrence Hun-Gi Aung, Chirag Pravin Pandya
Life of this patent
Estimating the term…
Abstract
A global endpoint may be associated with an organization name and a plurality of directories located in different geographic regions. The global endpoint may be a computing system that hosts a page used by users to access an application or service. A user may be able to access the application or service using already existing credentials. For example, the user may access the application or service using credentials stored and maintained by an entity with which the user is affiliated. Users having credentials stored in different geographic regions may be able to access the application or service via the same global endpoint.
Claims20
A system comprising:
- a content delivery network associated with a first region of a plurality of regions;
- and
- a computing resource service provider system comprising one or more computing devices, the computing resource service provider system associated with the first region, the computing resource service provider system configured with computer-executable instructions that, when executed, cause the computing resource service provider system to:
- obtain user credentials from the content delivery network, wherein the user credentials are associated with a first directory in a plurality of directories, and wherein the user credentials are provided to the computing resource service provider system in response to an applications server external to the first region determining that the first directory is located in the first region;
- determine a location of the first directory in the first region using an identifier unavailable to any system external to the first region;
- transmit the user credentials to the location of the first directory in the first region;
- receive results of authentication of the user credentials;
- and
- transmit, to the applications server via the content delivery network, the results of the authentication of the user credentials.
A computer-implemented method comprising:
- as implemented by a computing resource service provider system one or more computing devices, the computing resource service provider system associated with a first region of a plurality of regions and configured with specific executable instructions,
- receiving, from a content delivery network, user credentials, wherein the user credentials are associated with a first directory in a plurality of directories, and wherein the user credentials are received in response to a determination by a computing system external to the first region that the first directory is located in the first region;
- determining a location of the first directory in the first region using an identifier unavailable to any system external to the first region;
- transmitting the user credentials to the location of the first directory in the first region;
- receiving results of authentication of the user credentials;
- and
- transmitting, to the computing system via the content delivery network, the results of the authentication of the user credentials.
A non-transitory computer storage system comprising a non-transitory storage device, said computer storage system having stored thereon executable program instructions that direct a computer system associated with a first region of a plurality of regions to at least:
- obtain, from a content delivery network, user credentials, wherein the user credentials are associated with a first directory in a plurality of directories, and wherein the user credentials are received in response to a determination by an applications server external to the first region that the first directory is located in the first region;
- determine a location of the first directory in the first region using an identifier unavailable to any system external to the first region;
- transmit the user credentials to the location of the first directory in the first region;
- receive results of authentication of the user credentials;
- and
- transmit, to the applications server via the content delivery network, the results of the authentication of the user credentials.
Dependencies are inferred from the claim text.