# US 12,120,102 B2 · Authentication using session-less login > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,120,102 B2 - Document ID: US12120102B2 - Status: Granted - Kind: B2 - Application number: 18/593,566 - Filed: 2024-03-01 - Published: 2024-09-05 - Granted: 2024-10-15 - Earliest claimed: 2023-03-01 - Assignees: Inductive Automation, LLC - Applicants: Inductive Automation, LLC - Inventors: Joel Specht; Carl Reuben Gould - Web page: https://patentgrep.com/patent/US12120102B2 ## CPC - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/0815: {providing single-sign-on or federations} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An agent computer system uses a session-less login process to log in two users in a same application session. The system establishes an application session with an application server and a user session with the application server by authenticating a first user using an identity provider system (IdP). The system detects a request to perform an action by the first user within the application session that requires a second user's authentication. While maintaining the user session, the system requests a session-less authentication of the second user by transmitting an authentication request, which includes a flag indicating that the requested authentication is a session-less authentication. The system receives a confirmation of the authentication of the second user without establishing a second user session and performs the requested action in response to receiving the confirmation of the authentication of the second user. ## Claims ### Claim 1 A method comprising: establishing, by an agent computer system, an application session with an application server; establishing, by the agent computer system, a user session with the application server by authenticating a first user of the agent computer system using an identity provider system; detecting, by the agent computer system, a request to perform an action by the first user within the application session that requires a second user's authentication; while maintaining the user session with the application server, requesting, by the agent computer system, a session-less authentication of the second user using the identity provider system, wherein requesting the session-less authentication comprises transmitting an authentication request including a flag indicating that the requested authentication is a session-less authentication, the flag causing the identity provider system to ignore the user session; receiving, by the agent computer system, a confirmation of the authentication of the second user from the identity provider system without establishing a second user session with the application server associated with the second user; and performing, by the agent computer system, the requested action in response to receiving the confirmation of the authentication of the second user. ### Claim 2 (depends on 1) The method of claim 1, wherein maintaining the user session with the application server comprises: allowing the second user to approve an action initiated by the first user within the application session without ending or pausing the user session. ### Claim 3 (depends on 1) The method of claim 1, wherein maintaining the user session with the application server comprises: allowing the second user to join the application session without overwriting credentials associated with the user session maintained by the agent computer system. ### Claim 4 (depends on 1) The method of claim 1, wherein maintaining the user session with the application server comprises: allowing the second user to join the application session without deleting cookies stored by the agent computer system that include authentication information or user session information associated with the first user. ### Claim 5 (depends on 1) The method of claim 1, wherein the authentication request includes credentials associated with the second user and without credentials associated with the first user of the user session. ### Claim 6 (depends on 1) The method of claim 1, wherein establishing the user session with the application server comprises: receiving one or more credentials generated by the identity provider system for granting the first user an access to the user session with the application server. ### Claim 7 (depends on 6) The method of claim 6, wherein the one or more credentials include a session cookie to be stored in a web browser of the agent computer system. ### Claim 8 A non-transitory computer-readable storage medium storing instructions that, when executed by a processor, cause the processor to perform operations comprising: establishing, by an agent computer system, an application session with an application server; establishing, by the agent computer system, a user session with the application server by authenticating a first user of the agent computer system using an identity provider system; detecting, by the agent computer system, a request to perform an action by the first user within the application session that requires a second user's authentication; while maintaining the user session with the application server, requesting, by the agent computer system, a session-less authentication of the second user using the identity provider system, wherein requesting the session-less authentication comprises transmitting an authentication request including a flag indicating that the requested authentication is a session-less authentication, the flag causing the identity provider system to ignore the user session; receiving, by the agent computer system, a confirmation of the authentication of the second user from the identity provider system without establishing a second user session with the application server associated with the second user; and performing, by the agent computer system, the requested action in response to receiving the confirmation of the authentication of the second user. ### Claim 9 (depends on 8) The non-transitory computer-readable storage medium of claim 8, wherein maintaining the user session with the application server comprises: allowing the second user to approve an action initiated by the first user within the application session without ending or pausing the user session. ### Claim 10 (depends on 8) The non-transitory computer-readable storage medium of claim 8, wherein maintaining the user session with the application server comprises: allowing the second user to join the application session without overwriting credentials associated with the user session maintained by the agent computer system. ### Claim 11 (depends on 8) The non-transitory computer-readable storage medium of claim 8, wherein maintaining the user session with the application server comprises: allowing the second user to join the application session without deleting cookies stored by the agent computer system that include authentication information or user session information associated with the first user. ### Claim 12 (depends on 8) The non-transitory computer-readable storage medium of claim 8, wherein the authentication request includes credentials associated with the second user and without credentials associated with the first user of the user session. ### Claim 13 (depends on 8) The non-transitory computer-readable storage medium of claim 8, wherein establishing the user session with the application server comprises: receiving one or more credentials generated by the identity provider system for granting the first user an access to the user session with the application server. ### Claim 14 (depends on 13) The non-transitory computer-readable storage medium of claim 13, wherein the one or more credentials include a session cookie to be stored in a web browser of the agent computer system. ### Claim 15 A system comprising: one or more computer processors; and one or more computer-readable mediums storing instructions that, when executed by the one or more computer processors, cause the system to: establish an application session with an application server; establish a user session with the application server by authenticating a first user using an identity provider system; detect a request to perform an action by the first user within the application session that requires a second user's authentication; while maintaining the user session with the application server, request a session-less authentication of the second user using the identity provider system, wherein requesting the session-less authentication comprises transmitting an authentication request including a flag indicating that the requested authentication is a session-less authentication, the flag causing the identity provider system to ignore the user session; receive a confirmation of the authentication of the second user from the identity provider system without establishing a second user session with the application server associated with the second user; and perform the requested action in response to receiving the confirmation of the authentication of the second user. ### Claim 16 (depends on 15) The system of claim 15, wherein maintaining the user session with the application server comprises: allowing the second user to approve an action initiated by the first user within the application session without ending or pausing the user session. ### Claim 17 (depends on 15) The system of claim 15, wherein maintaining the user session with the application server comprises: allowing the second user to join the application session without overwriting credentials associated with the user session. ### Claim 18 (depends on 15) The system of claim 15, wherein maintaining the user session with the application server comprises: allowing the second user to join the application session without deleting cookies that include authentication information or user session information associated with the first user. ### Claim 19 (depends on 15) The system of claim 15, wherein the authentication request includes credentials associated with the second user and without credentials associated with the first user of the user session. ### Claim 20 (depends on 15) The system of claim 15, wherein the instruction to establish the user session with the application server further cause the system to: receive one or more credentials generated by the identity provider system for granting the first user an access to the user session with the application server.