# US 12,224,996 B2 · Co-branded single sign-on service with sign-on tracking > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,224,996 B2 - Document ID: US12224996B2 - Status: Granted - Kind: B2 - Application number: 18/190,013 - Filed: 2023-03-24 - Published: 2023-07-20 - Granted: 2025-02-11 - Earliest claimed: 2006-03-31 - Assignees: Amazon Technologies, Inc. - Applicants: Amazon Technologies, Inc. - Inventors: Peter Sirota - Web page: https://patentgrep.com/patent/US12224996B2 ## CPC - H04L 63/0815: {providing single-sign-on or federations} - G06Q 10/06315: {Needs-based resource requirements planning or analysis} - G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists - G06Q 30/0201: Market modelling; Market analysis; Collecting market data - G06Q 30/0203: Market surveys; Market polls - G06Q 30/0621: {by configuring or customising goods or services} - H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)} - H04L 63/10: {for controlling access to devices or network resources} - H04L 63/105: {Multiple levels of security} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract Techniques are described for providing customizable sign-on functionality, such as via an access manager system that provides single sign-on functionality and other functionality to other services for use with those services' users. The access manager system may maintain various sign-on and other account information for various users, and provide single sign-on functionality for those users using that maintained information on behalf of multiple unrelated services with which those users interact. The access manager may allow a variety of types of customizations to single sign-on functionality and/or other functionality available from the access manager, such as on a per-service basis via configuration by an operator of the service, such as co-branding customizations, customizations of information to be gathered from users, customizations of authority that may be delegated to other services to act on behalf of users, etc., and with the customizations that are available being determined specifically for that service. ## Claims ### Claim 1 A method comprising: performing, by a single sign-on (SSO) service implemented by one or more computer systems: managing access to a plurality of web services of a third-party service provider, including: sending, to a web browser, a web page configured to collect sign-on information, wherein the web page includes co-branding content that includes a logo image of the SSO service and another logo image of the third-party service provider; receiving the sign-on information from the web browser; verifying the sign-on information based at least in part on information stored in a user accounts database; and sending a credential to the web browser, wherein the credential is used by the web browser to access one or more of the web services; tracking activity data indicating sign-on attempts received by the SSO service; and providing the activity data to the third-party service provider in a format specified by the third-party service provider. ### Claim 2 (depends on 1) The method of claim 1, wherein one or more of the web services executes remotely from the SSO service. ### Claim 3 (depends on 1) The method of claim 1, wherein the activity data includes login times of the sign-on attempts. ### Claim 4 (depends on 1) The method of claim 1, wherein the activity data includes user information about individual users associated with the sign-on attempts. ### Claim 5 (depends on 1) The method of claim 1, further comprising the SSO service generating the credential in response to the verification of the sign-on information. ### Claim 6 (depends on 1) The method of claim 1, wherein the credential expires after a limited period of time. ### Claim 7 (depends on 1) The method of claim 1, wherein the credential is formatted in extensible Markup Language (XML). ### Claim 8 (depends on 1) The method of claim 1, wherein the web page includes a security measure to prevent phishing attempts. ### Claim 9 (depends on 1) The method of claim 1, wherein obtaining the sign-on information comprises sending a query to a mobile computing device of the user. ### Claim 10 (depends on 1) The method of claim 1, wherein the sign-on information includes biometric information of the user. ### Claim 11 A system comprising: one or more computer systems that implement a single sign-on (SSO) service configured to: manage access to a plurality of web services of a third-party service provider, including to: send, to a web browser, a web page configured to collect sign-on information, wherein the web page includes co-branding content that includes a logo image of the SSO service and another logo image of the third-party service provider; receive the sign-on information from the web browser; verify the sign-on information based at least in part on information stored in a user accounts database; and send a credential to the web browser, wherein the credential is used by the web browser to access one or more of the web services; track activity data indicating sign-on attempts received by the SSO service; and provide the activity data to the third-party service provider in a format specified by the third-party service provider. ### Claim 12 (depends on 11) The system of claim 11, wherein one or more of the web services executes remotely from the SSO service. ### Claim 13 (depends on 11) The system of claim 11, wherein the activity data includes login times of the sign-on attempts. ### Claim 14 (depends on 11) The system of claim 11, wherein the activity data includes user information about individual users associated with the sign-on attempts. ### Claim 15 (depends on 11) The system of claim 11, wherein the SSO service is configured to generate the credential in response to the verification of the sign-on information. ### Claim 16 (depends on 11) The system of claim 11, wherein the credential expires after a limited period of time. ### Claim 17 (depends on 11) The system of claim 11, wherein the credential is formatted in extensible Markup Language (XML). ### Claim 18 (depends on 11) The system of claim 11, wherein the web page includes a security measure to prevent phishing attempts. ### Claim 19 (depends on 11) The system of claim 11, wherein, to obtain the sign-on information, the SSO service is configured to send a query to a mobile computing device of the user. ### Claim 20 (depends on 11) The system of claim 11, wherein the sign-on information includes biometric information of the user.