Back to results
US 10,764,286 B2Granted
System and method for proxying federated authentication protocols
OwnerJon Oberheide, Douglas Songinventors
Life of this patent
Estimating the term…
Abstract
A system and method that include receiving a service provider identity request through a protocol; transmitting a proxy identity request to a configured identity provider; receiving an identity assertion; determining a proxy identity assertion based on the identity assertion; and transmitting the proxy identity assertion to the service provider.
Claims20
A method for providing a proxy identity assertion for a service provider, comprising:
- simulating an identity provider in a first type of authentication protocol based on a service provider identity request;
- simulating the service provider in a second type of authentication protocol different from the first type of authentication protocol to transmit a proxy identity request;
- translating attributes between the first type of authentication protocol and the second type of authentication protocol;
- and
- determining a proxy identity assertion.
2 more elements
A system comprising:
- a proxy server that comprises:
- an identity provider interface that simulates an identity provider through a first type of protocol,
- a service provider emulator that simulates a service provider through a second type of protocol,
- a translation module that translates identity requests and identity assertions processed within the identity provider interface and the service provider emulator, and
- an account system with a stored configuration of at least one managing account that includes configuration of the first type of protocol and the second type of protocol.
2 more elements
A method for single sign-on, comprising:
- configuring a first instance and a second instance of an authentication protocol;
- receiving an identity assertion through the first instance;
- simulating, in the second instance, an identity provider to transmit a proxy identity assertion;
- and
- prior to transmitting the proxy identity assertion, selecting the second instance according to an identifier of a managing account from the first instance.
2 more elements
Dependencies are inferred from the claim text.