Extensible framework for authentication

A method performed by a computing device, comprising:

• receiving, from an administration user interface, an authentication flow that comprises a selection and ordering of a first claims provider and a second claims provider by which authentication should be performed to access the resource;
• receiving, from a user, a request for access to the resource;
• accessing the authentication flow for granting access to the resource;
• obtaining first claims for the user from the first claims provider in the authentication flow;
• determining the second claims provider in the authentication flow, the second claims provider having a trust relationship with a claims facilitator;
• directing the user to a uniform resource locator (URL) of the second claims provider;
• receiving second claims for the user from the second claims provider to complete an authentication procedure requested by the second claims provider;
• and
• enabling the user to access the resource in response to at least the received first and second claims.

A computer-readable medium having computer program logic recorded thereon that when executed by at least one processor causes the at least one processor to perform a method, the method comprising:

• receiving, from an administration user interface, an authentication flow that comprises a selection and ordering of a first claims provider and a second claims provider by which authentication should be performed to access the resource;
• receiving, from a user, a request for access to the resource;
• accessing the authentication flow for granting access to the resource;
• obtaining first claims for the user from the first claims provider in the authentication flow;
• determining the second claims provider in the authentication flow, the second claims provider having a trust relationship with a claims facilitator;
• directing the user to a uniform resource locator (URL) of the second claims provider to complete an authentication procedure requested by the second claims provider;
• receiving second claims for the user from the second claims provider;
• and
• enabling the user to access the resource in response to at least the received first and second claims.