System, method, and computer-readable recording medium of creating, accessing, and recovering a user account with single sign on password hidden authentication

A non-transitory computer-readable recording medium in a client device for creating and accessing a user account of a user with a single sign on (SSO) password, the non-transitory computer-readable recording medium storing one or more programs which when executed by a processor of the client device causes the client device to perform one or more operations comprising:

• creating the user account by:
• receiving credential information via a user input;
• automatically generating the SSO password, wherein the SSO password is associated with the credential information;
• encrypting the SSO password using an encryption key retrieved, by the client device, from an electronic device within a network;
• storing the SSO password in the client device and the electronic device;
• and
• transmitting the SSO password and the encrypted SSO password to a cloud services platform for storage at the cloud services platform, wherein the cloud services platform is outside the network;
• and
• determining that the SSO password is not available to an application of the client device;
• requesting a one time passcode from the cloud services platform to be sent to a user email of the user;
• receiving entry of an entered passcode by the user;
• setting a temporary password;
• sending the credential information, the temporary password, and the entered passcode to the cloud server;
• receiving an encrypted SSO password from the cloud server based on the entered passcode and the one time passcode;
• retrieving the encryption key from the electronic device;
• decrypting the encrypted SSO password using the encryption key as the SSO password;
• resetting the temporary password to the SSO password;
• and
• transmitting the SSO password to the cloud services platform.

A client device for creating and accessing a user account of a user with single sign on (SSO) password, the client device comprising:

• a memory storing one or more instructions;
• a processor configured to execute the one or more instructions to:
• create the user account by:
• receiving credential information via a user input;
• automatically generating the SSO password, wherein the SSO password is associated with the credential information;
• encrypting the SSO password using an encryption key retrieved, by the client device, from an electronic device within a network;
• and
• transmitting the encrypted SSO password and the SSO password to a cloud services platform;
• and
• after creating the user account:
• determine that the SSO password is not available to an application of the client device;
• receive the credential information via user input;
• request a one time passcode from the cloud services platform;
• receive entry of an entered passcode by the user;
• set a temporary password;
• send the credential information, temporary password, and the entered passcode to the cloud server;
• receiving an encrypted SSO password from the cloud server based on the entered passcode and the one time passcode;
• retrieve the encryption key from the electronic device;
• decrypt the encrypted SSO password using the encryption key;
• reset the temporary password to the SSO password;
• and
• transmit the SSO password to the cloud services platform, wherein the cloud services platform is outside the network.