Authentication service
AssigneeVMware, Inc.
InventorsDavid Shaw, Daniel E. Zeck, Robert Worsnop
Life of this patent
Estimating the term…
Abstract
Disclosed are various approaches for relaying and caching authentication credentials. A single sign-on (SSO) token is received, the SSO token representing a user account authenticated with an identity manager. An authentication request is then sent to a service that is federated with the identity manager in response to receipt of the SSO token, the authentication request including the SSO token. An access token is received in response to the authentication request, the access token providing access to the service for the user account authenticated with the identity manager for a predefined period of time. The access token and a link between the access token and the SSO token are then cached.
Claims20
A system for relaying and caching authentication credentials, comprising:
- a computing device comprising a processor and a memory;
- and
- machine-readable instructions stored in the memory that, when executed by the processor, cause the computing device to at least:
- receive a single sign-on (SSO) token, the SSO token representing a user account authenticated with an identity manager;
- send an authentication request to a service that is federated with the identity manager in response to receipt of the SSO token, the authentication request comprising the SSO token;
- receive an access token in response to the authentication request, the access token providing access to the service for the user account authenticated with the identity manager for a predefined period of time;
- cache the access token and a link between the access token and the SSO token;
- receive, in an instance in which the access token has been cached, a request for the access token from an application, the request for the access token comprising the SSO token and an identifier corresponding to the service;
- and
- provide the access token linked to the SSO token to the application.
A method of relaying and caching authentication credentials, comprising:
- receiving a single sign-on (SSO) token, the SSO token representing a user account authenticated with an identity manager;
- sending an authentication request to a service that is federated with the identity manager in response to receipt of the SSO token, the authentication request comprising the SSO token;
- receiving an access token in response to the authentication request, the access token providing access to the service for the user account authenticated with the identity manager for a predefined period of time;
- caching the access token and a link between the access token and the SSO token;
- receiving, in an instance in which the access token has been cached, a request for the access token from an application, the request for the access token comprising the SSO token and an identifier corresponding to the service;
- and
- providing the access token linked to the SSO token to the application.
A non-transitory computer-readable medium for relaying and caching authentication credentials, the non-transitory computer-readable medium comprising machine-readable instructions that, when executed by a processor, cause a computing device to at least:
- receive a single sign-on (SSO) token, the SSO token representing a user account authenticated with an identity manager;
- send an authentication request to a service that is federated with the identity manager in response to receipt of the SSO token, the authentication request comprising the SSO token;
- receive an access token in response to the authentication request, the access token providing access to the service for the user account authenticated with the identity manager for a predefined period of time;
- cache the access token and a link between the access token and the SSO token in a memory of the computing device;
- receive, in an instance in which the access token has been cached, a request for the access token from an application, the request for the access token comprising the SSO token and an identifier corresponding to the service;
- and
- provide the access token linked to the SSO token to the application.
Dependencies are inferred from the claim text.