# US 2018/0324174 A1 · Saml sso ux improvements

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2018/0324174 A1
- Document ID: US20180324174A1
- Status: Published application
- Kind: A1
- Application number: 15/588,107
- Filed: 2017-05-05
- Published: 2018-11-08
- Earliest claimed: 2017-05-05
- Assignees: ServiceNow, Inc.
- Applicants: ServiceNow, Inc.
- Inventors: Subbaaraya Kumar Deverakonda Venkata; Sanjay Shrikanth Kittur; Kai Xu; Ashok Ganesan; Wallace Peng
- Web page: https://patentgrep.com/patent/US20180324174A1

## CPC

- H04L 63/0815: {providing single-sign-on or federations}
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04W 12/069: using certificates or pre-shared keys
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Improving a security configuration may include receiving a request to assign a single sign-on configuration for a user profile, present a user interface comprising input fields for configuration characteristics, receiving an indication from the user interface that an administrator is requesting the assign the configuration characteristics, in response to receiving the indication, performing a test connection using the configuration profile, and in response to determining that the test connection succeeded, prompting the administrator to activate the single sign-on communication for the user profile.

## Claims

### Claim 1

A method for improving a security configuration, comprising:
receiving a request to assign a single sign-on configuration for a user profile;
present a user interface comprising input fields for configuration characteristics;
receiving an indication from the user interface that an administrator is requesting the assign the configuration characteristics;
in response to receiving the indication, performing a test connection using the configuration profile; and
in response to determining that the test connection succeeded, prompting the administrator to activate the single sign-on communication for the user profile.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
in response to receiving the request to assign the single sign-on configuration, accessing a testing environment,
wherein the configuration characteristics are received and stored in the testing environment prior to an administrator activating the configuration characteristics.

### Claim 3 (depends on 2)

The method of claim 2, further comprising:
in response to determining that the test connection did not succeed, providing a results page, wherein the results page identifies the configuration characteristic causing the error.

### Claim 4 (depends on 1)

The method of claim 1, further comprising:
performing ongoing monitoring of an identity provider to detect updated digital certificates;
receiving, from the identity provider, an updated certificate; and
dynamically updating the digital certificate in the user profile.

### Claim 5 (depends on 4)

The method of claim 4, further comprising:
adding the updated certificate to a certificate store.

### Claim 6 (depends on 1)

The method of claim 1, wherein the single sign-on configuration comprises a security assertion markup language (SAML) configuration.

### Claim 7 (depends on 1)

The method of claim 1, further comprising, in response to receiving an indication from the user to activate the configuration characteristics:
confirming that the test connection was executed successfully; and
in response to confirming that the test connection was executed successfully, activating the configuration characteristics.

### Claim 8

A non-transitory computer readable medium comprising computer readable code for improving security configurations, executable by one or more processors to:
receive a request to assign a single sign-on configuration for a user profile;
present a user interface comprising input fields for configuration characteristics;
receive an indication from the user interface that an administrator is requesting the assign the configuration characteristics;
in response to receiving the indication, perform a test connection using the configuration profile; and
in response to determining that the test connection succeeded, prompt the administrator to activate the single sign-on communication for the user profile.

### Claim 9 (depends on 8)

The non-transitory computer readable medium of claim 8, further comprising computer readable code to:
in response to receiving the request to assign the single sign-on configuration, access a testing environment,
wherein the configuration characteristics are received and stored in the testing environment prior to an administrator activating the configuration characteristics.

### Claim 10 (depends on 9)

The non-transitory computer readable medium of claim 9, further comprising computer readable code to:
in response to determining that the test connection did not succeed, provide a results page, wherein the results page identifies the configuration characteristic causing the error.

### Claim 11 (depends on 8)

The non-transitory computer readable medium of claim 8, further comprising computer readable code to:
perform ongoing monitoring of an identity provider to detect updated digital certificates;
receive, from the identity provider, an updated certificate; and
dynamically update the digital certificate in the user profile.

### Claim 12 (depends on 11)

The non-transitory computer readable medium of claim 11, further comprising computer readable code to:
add the updated certificate to a certificate store.

### Claim 13 (depends on 8)

The non-transitory computer readable medium of claim 8, wherein the single sign-on configuration comprises a security assertion markup language (SAML) configuration.

### Claim 14 (depends on 8)

The non-transitory computer readable medium of claim 8, further comprising computer readable code to, in response to receiving an indication from the user to activate the configuration characteristics:
confirm that the test connection was executed successfully; and
in response to confirming that the test connection was executed successfully, activate the configuration characteristics.

### Claim 15

A system for improving security configurations, comprising:
a memory; and
one or more hardware processors configured to execute instructions stored in the memory to cause the multi-instance cloud system to:
receive a request to assign a single sign-on configuration for a user profile;
present a user interface comprising input fields for configuration characteristics;
receive an indication from the user interface that an administrator is requesting the assign the configuration characteristics;
in response to receiving the indication, perform a test connection using the configuration profile; and
in response to determining that the test connection succeeded, prompt the administrator to activate the single sign-on communication for the user profile.

### Claim 16 (depends on 15)

The system of claim 15, further comprising computer readable code to:
in response to receiving the request to assign the single sign-on configuration, access a testing environment,
wherein the configuration characteristics are received and stored in the testing environment prior to an administrator activating the configuration characteristics.

### Claim 17 (depends on 16)

The system of claim 16, further comprising computer readable code to:
in response to determining that the test connection did not succeed, provide a results page, wherein the results page identifies the configuration characteristic causing the error.

### Claim 18 (depends on 16)

The system of claim 16, further comprising computer readable code to:
perform ongoing monitoring of an identity provider to detect updated digital certificates;
receive, from the identity provider, an updated certificate; and
dynamically update the digital certificate in the user profile.

### Claim 19 (depends on 16)

The system of claim 16, wherein the single sign-on configuration comprises a security assertion markup language (SAML) configuration.

### Claim 20 (depends on 16)

The system of claim 16, further comprising computer readable code to, in response to receiving an indication from the user to activate the configuration characteristics:
confirm that the test connection was executed successfully; and
in response to confirming that the test connection was executed successfully, activate the configuration characteristics.