Privacy-aware ID gateway

An apparatus comprising:

• at least one computer readable storage medium having program instructions stored thereon;
• and
• at least one processor device operable to execute program instructions stored on the at least one computer readable storage medium to:
• receive a first authentication request for authenticating a first user, the first user having been authenticated on a first application with a first user identification (ID) using a first ID federation between the first application and a federation server;
• determine that the first user is authorized to access information of a second user on a second application based on the first user ID, the second user being different from the first user and being associated with a second user ID obtained based on the first user ID;
• and
• send a second authentication request for authenticating the first user to the second application with the second user ID using a second ID federation between the federation server and the second application.

A system comprising:

• a first application server configured to execute a first application;
• a second application server configured to execute a second application;
• at least one computer readable storage medium having program instructions stored thereon;
• and
• at least one processor device operable to execute program instructions stored on the at least one computer readable storage medium to:
• receive a first authentication request for authenticating a first user, the first user having been authenticated on the first application with a first user identification (ID) using a first ID federation between the first application and a federation server;
• determine that the first user is authorized to access information of a second user on a second application based on the first user ID, the second user being different from the first user and being associated with a second user ID obtained based on the first user ID;
• and
• send a second authentication request for authenticating the first user to the second application with the second user ID using a second ID federation between the federation server and the second application.