# US 11,030,295 B2 · Enabling webGUI access to target systems > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,030,295 B2 - Document ID: US11030295B2 - Status: Granted - Kind: B2 - Application number: 16/226,826 - Filed: 2018-12-20 - Published: 2020-06-25 - Granted: 2021-06-08 - Earliest claimed: 2018-12-20 - Assignees: Sap SE - Applicants: Sap SE - Inventors: Joshu Madina; Appalaswamy Yalamanchily; Wolfgang Janzen; Ralf Scheurer; Badari Nath J; Sarma Adithe - Web page: https://patentgrep.com/patent/US11030295B2 ## CPC - G06F 21/41: where a single sign-on provides access to a plurality of computers - G06F 9/547: {Remote procedure calls [RPC]; Web services} - G06F 16/955: using information identifiers, e.g. uniform resource locators [URL] - G06F 16/972: {Access to data in other repository systems, e.g. legacy data or dynamic Web page generation} - G06F 21/629: {to features or functions of an application} - H04L 63/0815: {providing single-sign-on or federations} - H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP] - H04L 67/14: Session management (for real-time applications in data packet communications networks H04L65/1066) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Methods, systems, and computer-readable storage media for receiving, by an intermediate system from a web browser, a request to access a target system, in response to the request, transmitting, by the intermediate system, a request for a reentrance ticket to a target system, the request for a reentrance ticket including user credentials, and transmitting, by the intermediate system, the reentrance ticket to the web browser, the web browser transmitting a request for a security session to the target system, and executing one or more calls to the target system during the security session. ## Claims ### Claim 1 A computer-implemented method for web-based graphical user interface (GUI) access to security sessions with target systems through access control of an intermediate system, the method being executed by one or more processors and comprising: receiving, by an intermediate system from a web browser, a request to access a web-based application executed within a target system; in response to the request, transmitting, by the intermediate system, a request for a reentrance ticket to access the web-based application executed within the target system, the request for a reentrance ticket comprising user credentials; receiving, by the intermediate system from the target system, the reentrance ticket and a uniform resource locator (URL) of the web-based application executed within the target system; and transmitting, by the intermediate system, the reentrance ticket and the URL of the web-based application to the web browser, the web browser transmitting a request for a security session to the web-based application using the URL, and executing one or more calls directly with the web-based application executed within the target system during the security session, the request for a security session being absent user credentials. ### Claim 2 (depends on 1) The method of claim 1, wherein the request for the reentrance ticket is transmitted from the target system to the intermediate system over a remote function call (RFC) channel. ### Claim 3 (depends on 1) The method of claim 1, wherein the reentrance ticket is transmitted to the web browser and includes an auto-submit function that is automatically executed by the web browser to transmit the request for the security session to the target system. ### Claim 4 (depends on 1) The method of claim 1, wherein the reentrance ticket, a uniform resource locator (URL) of a single-sign on (SSO) control endpoint, and the URL of the web-based application of the target system are transmitted to the web browser in a form from the intermediate system. ### Claim 5 (depends on 1) The method of claim 1, wherein the intermediate system is hosted by a vendor, and the target system is provided by the vendor, and hosted by an enterprise as an on-premise system. ### Claim 6 (depends on 1) The method of claim 1, wherein the credentials are assigned to a firefighter user. ### Claim 7 (depends on 1) The method of claim 1, further comprising providing a hypertext transfer protocol (HTTP) session between the web browser and the intermediate system, the request to access the target system being transmitted over the HTTP session. ### Claim 8 A non-transitory computer-readable storage medium coupled to one or more processors and having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations for web-based graphical user interface (GUI) access to security sessions with target systems through access control of an intermediate system, the operations comprising: receiving, by an intermediate system from a web browser, a request to access a web-based application executed within a target system; in response to the request, transmitting, by the intermediate system, a request for a reentrance ticket to access the web-based application executed within the target system, the request for a reentrance ticket comprising user credentials; receiving, by the intermediate system from the target system, the reentrance ticket and a uniform resource locator (URL) of the web-based application executed within the target system; and transmitting, by the intermediate system, the reentrance ticket and the URL of the web-based application to the web browser, the web browser transmitting a request for a security session to the web-based application using the URL, and executing one or more calls directly with the web-based application executed within the target system during the security session, the request for a security session being absent user credentials. ### Claim 9 (depends on 8) The computer-readable storage medium of claim 8, wherein the request for the reentrance ticket is transmitted from the target system to the intermediate system over a remote function call (RFC) channel. ### Claim 10 (depends on 8) The computer-readable storage medium of claim 8, wherein the reentrance ticket is transmitted to the web browser and includes an auto-submit function that is automatically executed by the web browser to transmit the request for the security session to the target system. ### Claim 11 (depends on 8) The computer-readable storage medium of claim 8, wherein the reentrance ticket, a uniform resource locator (URL) of a single-sign on (SSO) control endpoint, and the URL of the web-based application of the target system are transmitted to the web browser in a form from the intermediate system. ### Claim 12 (depends on 8) The computer-readable storage medium of claim 8, wherein the intermediate system is hosted by a vendor, and the target system is provided by the vendor, and hosted by an enterprise as an on-premise system. ### Claim 13 (depends on 8) The computer-readable storage medium of claim 8, wherein the credentials are assigned to a firefighter user. ### Claim 14 (depends on 8) The computer-readable storage medium of claim 8, wherein operations further comprise providing a hypertext transfer protocol (HTTP) session between the web browser and the intermediate system, the request to access the target system being transmitted over the HTTP session. ### Claim 15 A system, comprising: a computing device; and a computer-readable storage device coupled to the computing device and having instructions stored thereon which, when executed by the computing device, cause the computing device to perform operations for web-based graphical user interface (GUI) access to security sessions with target systems through access control of an intermediate system, the operations comprising: receiving, by an intermediate system from a web browser, a request to access a web-based application executed within a target system; in response to the request, transmitting, by the intermediate system, a request for a reentrance ticket to access the web-based application executed within the target system, the request for a reentrance ticket comprising user credentials; receiving, by the intermediate system from the target system, the reentrance ticket and a uniform resource locator (URL) of the web-based application executed within the target system; and transmitting, by the intermediate system, the reentrance ticket and the URL of the web-based application to the web browser, the web browser transmitting a request for a security session to the web-based application using the URL, and executing one or more calls directly with the web-based application executed within the target system during the security session, the request for a security session being absent user credentials. ### Claim 16 (depends on 15) The system of claim 15, wherein the request for the reentrance ticket is transmitted from the target system to the intermediate system over a remote function call (RFC) channel. ### Claim 17 (depends on 15) The system of claim 15, wherein the reentrance ticket is transmitted to the web browser and includes an auto-submit function that is automatically executed by the web browser to transmit the request for the security session to the target system. ### Claim 18 (depends on 15) The system of claim 15, wherein the reentrance ticket, a uniform resource locator (URL) of a single-sign on (SSO) control endpoint, and the URL of the web-based application of the target system are transmitted to the web browser in a form from the intermediate system. ### Claim 19 (depends on 15) The system of claim 15, wherein the intermediate system is hosted by a vendor, and the target system is provided by the vendor, and hosted by an enterprise as an on-premise system. ### Claim 20 (depends on 15) The system of claim 15, wherein the credentials are assigned to a firefighter user.