Back to results
US 2008/0168539 A1Published application
Methods and systems for federated identity management
OwnerJoseph Steininventor
Life of this patent
Estimating the term…
Abstract
A request for access to a target computer application for which a particular set of user credentials are required is received through a different computer application for which a different set of user credentials are required. Authentication credentials associated with a first session token issued in connection with authenticated user access to the different computer application are mapped to access credentials for the target computer application. Access to functionality provided by the target computer application may be granted based on a second session token issued in response to a correlation between the authentication credentials associated with the different computer application and the access credentials for the target computer application.
Claims41
A method, comprising:
- receiving, through a first computer-based application for which a first set of user credentials are required in order to gain access to functionality provided by said first computer-based application, a request for access to a second computer application for which a second set of user credentials are required in order to gain access to functionality provided by said second computer-based application;
- mapping, in response to a request for authentication to the second computer-based application, authentication credentials associated with a first session token issued in connection with authenticated user access to the first computer-based application to access credentials for the second computer-based application;
- and
- allowing access to functionality provided by the second computer-based application through the first computer-based application based on a second session token issued in response to the access credentials for the second computer-based application.
1 more element
A method, comprising:
- redirecting, with a first Security Assertions Mark-up Language (SAML) artifact, a first request for access to a target computer system that was made through a first computer system so as to direct said first request to an artifact receiver service hosted by a trusted relying party;
- providing, in response to a second request by the trusted relying party, a SAML assertion associated with the request;
- granting, by the trusted relying party, permission for the first computer system to participate with the target computer system and requesting, by the trusted relying party on behalf of the first computer system, access to the target computer system;
- receiving, at the target computer system, the first request for access from the trusted relying party and converting authentication information regarding a user of the first computer system into local authentication credentials known by the target computer system;
- and
- upon successful authentication at the target computer system using local authentication credentials for the user, granting access to the target computer system.
3 more elements
A method comprising:
- receiving authentication information from a user;
- granting access to the user to a first application;
- receiving a request from the user to access a second application;
- determining a correlation between a first identity of the user with respect to the first application stored in a central repository of user information and a second identity of the user with respect to the second application stored in the central repository of user information;
- and
- granting access to the user to the second application based on the correlation of the first identity of the user and the second identity of the user.
3 more elements
A method comprising:
- receiving authentication information from a user;
- granting access to the user to a first application;
- receiving a plurality of requests from a user to access a plurality of applications;
- determining a correlation between a first identity of the user with respect to the first application stored in a central repository of user information and the identity of the user with respect to each of a plurality of applications stored in a central repository of user information;
- and
- granting access to the user to one or more of the plurality of applications based on the correlation of the first identity of the user and the identity of the user with respect to a corresponding one or more of the plurality of applications.
3 more elements
A computer program product used with a processor, the computer program product comprising:
- computer-readable medium, including computer readable program code embodied therein used when implementing a method for managing the identity of a user over multiple applications, the computer-readable medium including:
- computer readable program code that receives authentication information from a user;
- computer readable program code that grants access to the user to a first application;
- computer readable program code that receives a request from the user to access a second application;
- computer readable program code that determines a correlation between a first identity of the user with respect to the first application stored in a central repository of user information and a second identity of the user with respect to the second application stored in the central repository of user information;
- and
- computer readable program code that grants access to the user to the second application based on the correlation of the first identity of the user and the second identity of the user.
4 more elements
A system for managing access on a network, the system comprising:
- a first application coupled to the network, the first application receiving authentication information from a user and granting access to the user based on the authentication information;
- a second application coupled to the network;
- and
- a central repository of user information coupled to the network and including a first identity of the user with respect to the first application and a second identity of the user with respect to the second application;
- wherein the second application receives a request for access of the second application by the user and grants access to the user based on the correlation of the first identity of the user and the second identity of the user.
2 more elements
Dependencies are inferred from the claim text.