Multi-device single sign-on
AssigneeVMware, Inc.
InventorsJitender Singh Chauhan, Pinaki Sankar Kabiraj, Sameer Madhu Nadagouda, Mayank Joshi
Life of this patent
Estimating the term…
Abstract
Disclosed are various approaches for extending a single sign-on (SSO) session to multiple devices. If a device is enrolled as a managed device with a management service, a SSO session can be extended to the device if the user has previously authenticated with an identity provider from another device. The user is authenticated on the second device using a user-and-device token issued by the management service with which the device is enrolled as a managed device.
Claims20
A system for multi-device single sign-on (SSO) comprising:
- at least one computing device;
- a management service executed by the at least one computing device, wherein the management service causes the at least one computing device to at least:
- complete enrollment of a client device as a managed device with the management service, the management service configured to communicate with a management component installed on the client device;
- in response to a request to access a service that is redirected to an identity provider service, receive a request for a user-and-device token from the client device, the request identifying a user account;
- generate the user-and-device token in response to the request;
- and
- transmit the user-and-device token to the client device, wherein the client device provides the user-and-device token to an application on the client device that communicates with the identity provider.
A non-transitory computer-readable medium comprising machine-readable instructions, wherein the instructions, when executed by at least one processor, cause a computing device to at least:
- complete enrollment of a client device as a managed device with a management service, the management service executed remotely from the client device and configured to communicate with a management component installed on the client device;
- in response to a request to access a service that is redirected to an identity provider service, receive a request for a user-and-device token from the client device, the request identifying a user account;
- generate the user-and-device token in response to the request;
- and
- transmit the user-and-device token to the client device, wherein the client device provides the user-and-device token to an application on the client device that communicates with the identity provider.
A method comprising:
- completing enrollment of a client device as a managed device with an management service, the management service executed remotely from the client device and configured to communicate with a management component installed on the client device;
- in response to a request to access a service that is redirected to an identity provider service, receiving a request for a user-and-device token from the client device, the request identifying a user account;
- generating the user-and-device token in response to the request;
- and
- transmitting the user-and-device token to the client device, wherein the client device provides the user-and-device token to an application on the client device that communicates with the identity provider.
Dependencies are inferred from the claim text.