Systems and methods for authorizing access to computing resources

A non-transitory machine-readable medium storing a program executable by at least one processing unit of a computer, the program comprising sets of instructions for:

• storing, in a first software component of an authentication server, at least one credential for accessing a first system;
• storing, in the first software component, a plurality of user credentials for a plurality of users, the plurality of user credentials not previously or currently having access to the first system;
• receiving, in the first software component, a first user credential for a first user from a second system over a first connection, the first user credential not previously or currently having access to the first system;
• authenticating the first user credential, wherein the first user credential is validated when the first user credential matches one of the stored plurality of user credentials;
• establishing a second connection between the authentication server and first system using the at least one credential when the first user credential is authenticated, the second connection is established using a bidirectional socket;
• and
• sending a handle to the bidirectional socket to the second system to establish the second connection between the first system and the second system wherein the second system uses the handle to open the second connection between the first system and the second connection.

A computer system comprising:

• a processor;
• and
• a non-transitory machine-readable medium storing a program executable by the processor, the program comprising sets of instructions for:
• storing, in a data service authentication server, at least one credential for accessing an enterprise resource planning system;
• storing, in the data service authentication server, a plurality of user credentials for a plurality of users of a data service system, wherein users of the data service system extract data from or load data into at least one data store in the enterprise resource planning system, the plurality of user credentials not previously or currently having access to the enterprise resource planning system;
• receiving, in the data service authentication server, a first user credential for a first user from the data service system over a first connection the first user credential not previously or currently having access to the first system;
• authenticating the first user credential, wherein the first user credential is validated when the first user credential matches one of the stored plurality of user credentials;
• establishing a second connection between the data service authentication server and the enterprise resource planning system using the at least one credential when the first user credential is authenticated, the second connection is established using a bidirectional socket;
• and
• sending a handle to the bidirectional socket to the data service system to establish the second connection between the enterprise resource planning system and the data service system, wherein the data service system uses the handle to open the second connection between the enterprise resource planning system and the data service system.