Federated authentication server, federated authentication method, federated authentication system, and storage medium

A federated authentication method for providing, in cooperation with an authentication server, a function of authenticating a user terminal to a resource server configured to provide a service to the user terminal, the federated authentication method comprising:

• transmitting authentication information about a user of the user terminal to the authentication server;
• receiving, from the authentication server, a token which is used for accessing the resource server from the user terminal;
• issuing a code which is used for identifying an authentication success response after the token is received from the authentication server, wherein the code is generated by the federated authentication server;
• storing the code and the token in association with each other before a token request including the code is transmitted from the resource server;
• and
• transmitting the token associated with the code to the resource server in a case where the token request is transmitted from the resource server, wherein the token request indicates that the resource server requests the federated authentication server to transmit the token associated with the code.

A non-transitory computer-readable storage medium storing a program for causing a federated authentication server to execute a federated authentication method for providing, in cooperation with an authentication server, a function of authenticating a user terminal to a resource server configured to provide a service to the user terminal, the federated authentication method comprising:

• transmitting authentication information about a user of the user terminal to the authentication server;
• receiving, from the authentication server, a token which is used for accessing the resource server from the user terminal;
• issuing a code which is used for identifying an authentication success response after the token is received from the authentication server, wherein the code is generated by the federated authentication server;
• storing the code and the token in association with each other before a token request including the code is transmitted from the resource server;
• and
• transmitting the token associated with the code to the resource server in a case where the token request is transmitted from the resource server, wherein the token request indicates that the resource server requests the federated authentication server to transmit the token associated with the code.

A federated authentication system comprising:

• an authentication server;
• and
• a federated authentication server configured to provide, in cooperation with the authentication server, a function of authenticating a user terminal to a resource server configured to provide a service to the user terminal, wherein the federated authentication server includes:
• one or more processors;
• and
• one or more memories including instructions that, when executed by the one or more processors, causes the federated authentication server to:
• transmit authentication information about a user of the user terminal to the authentication server;
• receive, from the authentication server, a token which is used for accessing the resource server from the user terminal;
• issue a code which is used for identifying an authentication success response after the token is received from the authentication server, wherein the code is generated by the federated authentication server;
• store the code and the token in association with each other before a token request including the code is transmitted from the resource server;
• and
• transmit the token associated with the code to the resource server in a case where the token request is transmitted from the resource server, wherein the token request indicates that the resource server requests the federated authentication server to transmit the token associated with the code.