# US 2014/0208408 A1 · Methods and apparatus to facilitate single sign-on services > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0208408 A1 - Document ID: US20140208408A1 - Status: Published application - Kind: A1 - Application number: 13/992,971 - Filed: 2011-12-28 - Published: 2014-07-24 - Earliest claimed: 2011-12-28 - Assignees: Intel Corporation - Inventors: Aras Bilgen; James P. Ketrenos - Web page: https://patentgrep.com/patent/US20140208408A1 ## CPC - H04L 63/0815: {providing single-sign-on or federations} - G06F 21/41: where a single sign-on provides access to a plurality of computers - H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Methods, articles of manufacture and apparatus are disclosed to facilitate single sign-on services. An example method includes monitoring web session activity for an indication of entry of first credentials, identifying an SSO framework associated with the device in response to detecting a context event indicative of web session termination, querying the SSO framework for second credentials associated with the web session, and configuring SSO services on the device when the second credentials are absent from the SSO framework. ## Claims ### Claim 1 A method to configure single sign-on (SSO) services for a device, comprising: monitoring web session activity for an indication of entry of first credentials; identifying an SSO framework associated with the device in response to detecting a context event indicative of web session termination; querying the SSO framework for second credentials associated with the web session; and configuring SSO services on the device when the second credentials are absent from the SSO framework. ### Claim 2 (depends on 1) A method as described in claim 1, further comprising querying the SSO framework for an indication of a decline request. ### Claim 3 (depends on 2) A method as described in claim 2, further comprising suppressing user prompts in response to detecting the decline request. ### Claim 4 (depends on 2) A method as described in claim 2, further comprising identifying a credential field type associated with the web session in response to detecting an absence of the decline request. ### Claim 5 (depends on 4) A method as described in claim 4, wherein the credential field type comprises at least one of a username field, a password field, or a challenge question field. ### Claim 6 (depends on 4) A method as described in claim 4, wherein the credential field type is defined by a plug-in associated with the web session. ### Claim 7 (depends on 4) A method as described in claim 4, further comprising comparing the credential field type with the first credentials to determine whether authentication requirements for the web session are satisfied. ### Claim 8 (depends on 7) A method as described in claim 7, further comprising suppressing a credential entry prompt and invoking a permission prompt when the credential field type matches the first credentials. ### Claim 9 (depends on 7) A method as described in claim 7, further comprising identifying a missing credential field type when the credential field type does not match the first credentials. ### Claim 10 An apparatus to configure single sign-on (SSO) services for a device, comprising: a credential input monitor to monitor web session activity for an indication of entry of first credentials; a context event monitor to detect a context event indicative of web session termination; and an SSO framework interface to identify an SSO framework associated with the device in response to the context event, the context event monitor to query the SSO framework for second credentials and to configure SSO services on the device when the second credentials are absent from the SSO framework. ### Claim 11 (depends on 10) An apparatus as described in claim 10, wherein the SSO framework interface is to query the SSO framework for an indication of a decline request. ### Claim 12 (depends on 11) An apparatus as described in claim 11, further comprising an extender prompt engine to suppress user prompts in response to detecting the decline request. ### Claim 13 (depends on 11) An apparatus as described in claim 11, wherein the credential input monitor is to identify a credential field type associated with the web session in response to detecting an absence of the decline request. ### Claim 14 (depends on 13) An apparatus as described in claim 13, wherein the credential input monitor is to detect at least one of a username field, a password field, or a challenge question field. ### Claim 15 (depends on 13) An apparatus as described in claim 13, further comprising a plug-in associated with the web session to provide authentication field requirements. ### Claim 16 (depends on 13) An apparatus as described in claim 13, further comprising a credential comparator to compare the credential field type with the first credentials to determine whether authentication requirements for the web session are satisfied. ### Claim 17 At least one tangible computer readable medium having instructions stored thereon that, when executed, cause a machine to, at least: monitor web session activity for an indication of entry of first credentials; identify an SSO framework associated with the device in response to detecting a context event indicative of web session termination; query the SSO framework for second credentials associated with the web session; and configure SSO services on the device when the second credentials are absent from the SSO framework. ### Claim 18 (depends on 17) A tangible computer readable medium as described in claim 17 having instructions stored thereon that, when executed, cause a machine to query the SSO framework for an indication of a decline request. ### Claim 19 (depends on 18) A tangible computer readable medium as described in claim 18 having instructions stored thereon that, when executed, cause a machine to suppress user prompts in response to detecting the decline request. ### Claim 20 (depends on 18) A tangible computer readable medium as described in claim 18 having instructions stored thereon that, when executed, cause a machine to identify a credential field type associated with the web session in response to detecting an absence of the decline request. ### Claim 21 (depends on 20) A tangible computer readable medium as described in claim 20 having instructions stored thereon that, when executed, cause a machine to identify at least one of a username field, a password field, or a challenge question field. ### Claim 22 (depends on 20) A tangible computer readable medium as described in claim 20 having instructions stored thereon that, when executed, cause a machine to identify the credential field type from a plug-in associated with the web session. ### Claim 23 (depends on 20) A tangible computer readable medium as described in claim 20 having instructions stored thereon that, when executed, cause a machine to compare the credential field type with the first credentials to determine whether authentication requirements for the web session are satisfied. ### Claim 24 (depends on 23) A tangible computer readable medium as described in claim 23 having instructions stored thereon that, when executed, cause a machine to suppress a credential entry prompt and invoking a permission prompt when the credential field type matches the first credentials. ### Claim 25 (depends on 23) A tangible computer readable medium as described in claim 23 having instructions stored thereon that, when executed, cause a machine to identify a missing credential field type when the credential field type does not match the first credentials.