US 10,834,069 B2Granted

Identification federation based single sign-on

AssigneeInternational Business Machines Corporation

InventorsMiki Enoki, Yuji Watanabe

Life of this patent

Estimating the term…

Loading patent…

Abstract

A computer readable medium having instructions embodied therewith, the instructions executable by a processor or programmable circuitry of a federation server to cause the processor or programmable circuitry to perform operations including configuring a plurality of identification (ID) federations between the federation server and a plurality of applications such that each of the plurality of ID federations is between the federation server and one of the plurality of applications, receiving a first authentication request for authenticating a user who has been authenticated on a first application of the plurality of applications using an ID federation between the first application and the federation server from among the plurality of ID federations, and sending a second authentication request to a second application of the plurality of applications for authenticating the user using an ID federation between the federation server and the second application from among the plurality of ID federations.

Claims20

Dependent claims

configuring, by the federation server, a plurality of identification (ID) federations between the federation server and a plurality of applications, each of the plurality of ID federations being between the federation server and a respective one of the plurality of applications;
receiving, by the federation server, a first authentication request via the user's client device from a first application of the plurality of applications for authenticating a user on a second application of the plurality of applications selected by the user, the user having been authenticated on the first application using an ID federation between the first application and the federation server, the first authentication request including an identifier of the second application;
and sending, by the federation server, a second authentication request via the users client device to the second application, the second authentication request including authentication information associated with the second application for authenticating the user using an ID federation between the federation server and the second application.

A system comprising:

a configuring section, of a federation server, to configure a plurality of identification (ID) federations between the federation server and a plurality of applications such that each of the plurality of ID federations is between the federation server and one of the plurality of applications;
a receiving section, of the federation server, to receive a first authentication request via the user's client device from a first application of the plurality of applications for authenticating a user on a second application of the plurality of applications selected by the user, the user having been authenticated on the first application using an ID federation between the first application and the federation server, the first authentication request including an identifier of the second application;
and a sending section, of the federation server, to send a second authentication request via the user's client device to the second application, the second authentication request including authentication information associated with the second application for authenticating the user using an ID federation between the federation server and the second application.

A method comprising:

configuring, by the federation server, a plurality of identification (ID) federations between a federation server and a plurality of applications such that each of the plurality of ID federations is between the federation server and one of the plurality of applications;
receiving, by the federation server, a first authentication request via the user's client device from a first application of the plurality of applications for authenticating a user on a second application of the plurality of applications selected by the user, the user having been authenticated on the first application using an ID federation between the first application and the federation server, the first authentication request including an identifier of the second application;
and sending, by the federation server, a second authentication request via the user's client device to the second application, the second authentication request including authentication information associated with the second application for authenticating the user using an ID federation between the federation server and the second application.

Dependencies are inferred from the claim text.