# US 2013/0160105 A1 · Configuring identity federation configuration > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2013/0160105 A1 - Document ID: US20130160105A1 - Status: Published application - Kind: A1 - Application number: 13/719,305 - Filed: 2012-12-19 - Published: 2013-06-20 - Earliest claimed: 2011-12-19 - Assignees: International Business Machines Corporation - Inventors: He Yuan Huang; Liu Jian; Min Li; Xiao Xi Liu - Web page: https://patentgrep.com/patent/US20130160105A1 ## CPC - G06F 21/41: where a single sign-on provides access to a plurality of computers - G06F 21/604: {Tools and structures for managing or administering access control systems} - H04L 63/0815: {providing single-sign-on or federations} - H04L 63/10: {for controlling access to devices or network resources} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method and apparatus for configuring identity federation configuration. The method includes: acquiring a set of identity federation configuration properties of a first computing system and a set of identity federation configuration properties of a second computing system; identifying one or more pairs of associated properties in the first and the second sets, where the pairs of associated properties include one property from each set of identity federation configuration; displaying, properties that need to be configured manually from the each sets of identity federation configuration properties, where the properties that need to be configured manually do not include the property in any pair of associated properties for which the value can be derived from the value of another property in the pair; automatically assigning a property that can be derived from the value of another property; and providing each computing systems with each set of identity federation properties. ## Claims ### Claim 1 A method for configuring identity federation configuration, comprising: acquiring a first set of identity federation configuration properties of a first computing system and a second set of identity federation configuration properties of a second computing system; identifying one or more pairs of associated properties in the first and the second sets of identity federation configuration properties, wherein each of the pairs of associated properties includes one property from the first set of identity federation configuration properties and one property from the second set of identity federation configuration properties; displaying, in a unified user interface, properties that need to be configured manually from the first and the second sets of identity federation configuration properties, wherein the properties that need to be configured manually do not include the property in any pair of associated properties for which the value can be derived from the value of another property in the pair; automatically assigning a value to a property for which the value can be derived from the value of another property; and providing the first and the second computing systems with the first configured set of identity federation properties and the second configured set of identity federation properties, respectively. ### Claim 2 (depends on 1) The method according to claim 1, further comprising: converting the acquired first and second sets of federation configuration properties to a first set of public federation configuration properties and a second set of public federation configuration properties, respectively. ### Claim 3 (depends on 2) The method according to claim 2, wherein the properties in the first set of public federation configuration properties and the second set of public federation properties include configurable properties defined according to the identity federation domain knowledge and a federation protocol. ### Claim 4 (depends on 3) The method according to claim 3, wherein the federation protocol is SAML protocol. ### Claim 5 (depends on 2) The method according to claim 2, wherein said identifying one or more pairs of associated properties in the first and the second sets of identity federation configuration properties comprises: identifying one or more pairs of associated properties in the first set of public identity federation configuration properties and the second set of public identity federation configuration properties, wherein each of the pairs of associated properties includes one property from the first set of public identity federation configuration properties and one property from the second set of public identity federation configuration properties. ### Claim 6 (depends on 5) The method according to claim 5, wherein the first and the second computing systems respectively with the first set of identity federation properties and the second set of identity federation properties that have been configured comprises: converting the first and the second sets of public identity federation configuration properties respectively to the first and the second sets of identity federation properties. ### Claim 7 (depends on 1) The method according to claim 1, wherein the value of an identity federation configuration property is a pre-defined value. ### Claim 8 (depends on 1) The method according to claim 1, wherein the value of an identity federation configuration property is a value that is input via a unified user interface. ### Claim 9 (depends on 5) The method according to claim 5, wherein the first and the second sets of identity federation properties that have been configured are stored in a database. ### Claim 10 (depends on 9) The method according to claim 9, wherein said acquiring a first set of identity federation configuration properties of a first computing system and a second set of identity federation configuration properties of a second computing system comprises: acquiring the first set of identity federation properties and the second set of identity federation properties that have been configured from the database. ### Claim 11 An apparatus for configuring identity federation configuration, comprising: a processor; and a memory, comprising: an acquisition module, configured to acquire a first set of identity federation configuration properties of a first computing system and a second set of identity federation configuration properties of a second computing system; an association module, configured to identify one or more pairs of associated properties in the first and the second sets of identity federation configuration properties, wherein each of the pairs of associated properties includes one property from the first set of identity federation configuration properties and one property from the second set of identity federation configuration properties; a user interaction module, configured to display, in a unified user interface, properties that need to be configured manually from the first and the second sets of identity federation configuration properties, wherein the properties that need to be configured manually do not include the property in any pair of associated properties for which the value can be derived from the value of another property in the pair; a cross-assignment module, configured to automatically assign a value to an property for which the value can be derived from the value of another property; and a configuration adapter, configured to provide the first and the second computing systems respectively with the first set of identity federation properties and the second set of identity federation properties that have been configured. ### Claim 12 (depends on 11) The apparatus according to claim 11, further comprising: a conversion module, configured to convert the acquired first and second sets of federation configuration properties respectively to a first set of public federation configuration properties and a second set of public federation configuration properties. ### Claim 13 (depends on 12) The apparatus according to claim 12, wherein the properties in the first set of public federation configuration properties and the second set of public federation properties include configurable properties defined according to the identity federation domain knowledge and a federation protocol. ### Claim 14 (depends on 13) The apparatus according to claim 13, wherein the federation protocol is SAML protocol. ### Claim 15 (depends on 12) The apparatus according to claim 12, wherein said association module is further configured to identify one or more pairs of associated properties in the first set of public identity federation configuration properties and the second set of public identity federation configuration properties, wherein each of the pairs of associated properties includes one property from the first set of public identity federation configuration properties and one property from the second set of public identity federation configuration properties. ### Claim 16 (depends on 15) The apparatus according to claim 15, wherein said conversion module is further configured to convert the first set of public identity federation configuration properties and the second set of public identity federation configuration properties respectively to the first set of identity federation configuration properties and the second set of identity federation configuration properties. ### Claim 17 (depends on 11) The apparatus according to claim 11, wherein the value of another property is a pre-defined value. ### Claim 18 (depends on 11) The apparatus according to claim 11, wherein the value of another property is a value that is input via the unified user interface. ### Claim 19 (depends on 15) The apparatus to claim 15, wherein the first and the second sets of identity federation properties that have been configured are stored in a database. ### Claim 20 (depends on 19) The apparatus according to claim 19, wherein said acquisition module is configured to acquire the first set of identity federation properties and the second set of identity federation properties that have been configured from the database.