System and method for translating custom entitlements
AssigneeJPMorgan Chase Bank, N.A.
InventorsBrooke Koskinen, Imamuddin H. Syed, William Loughery
Life of this patent
Estimating the term…
Abstract
An embodiment of the present invention is directed to a translation layer that intercepts a token and converts new group names into old entitlement verbiage based on data loaded at start-up (e.g., hash map, etc.) from a configuration file. The old entitlement verbiage may be loaded into the User Session just as it would have been if the entitlements had come from within the old application authorization structure. The remainder of the application is unaware that the authorization source has changed.
Claims18
A system that implements a translation layer that converts source groups into custom entitlements known by the application, the system comprising:
- a computer processor configured to perform the steps of:
- reading, via the computer processor, an inbound single sign-on token wherein the single sign-on token references one or more groups;
- and
- translating, via a library component of the computer processor, the one or more groups to a corresponding entitlement based on injected mappings loaded at start-up;
- storing, via the library component, the corresponding entitlements in a User Session;
- and
- enabling, via the library component, the application to access the corresponding entitlements;
- wherein the library component and the injected mappings are supported by a user interface that executes the application, and further wherein the library component uses a group name to return a corresponding entitlement to a main process to be loaded into a session object.
A method that implements a translation layer that converts source groups into custom entitlements known by the application, the method comprising the steps of:
- receiving, via an input, an inbound single sign-on token wherein the single sign-on token references one or more groups;
- translating, via a library component, the one or more groups to a corresponding entitlement based on injected mappings loaded at start-up;
- storing the corresponding entitlements in a User Session;
- and
- enabling the application to access the corresponding entitlements;
- wherein the library component and the injected mappings are supported by a user interface that executes the application, and further wherein the library component uses a group name to return a corresponding entitlement to a main process to be loaded into a session object.
Dependencies are inferred from the claim text.