Web-based interface integration for single sign-on

A single sign-on service system for web-based access management, the single sign-on service system comprising:

• a first tunnel proxy configured to:
• receive, from a second tunnel proxy of a single sign-on gateway, a management operation request, wherein:
• the second tunnel proxy converts a first request, received from a client device via a web interface associated with the single sign-on service system, from a first protocol to an access protocol to generate the management operation request;
• and
• the management operation request identifies a management operation that is one of a credential management operation or a policy management operation;
• in response to receiving the management operation request, convert the management operation request from the access protocol to the first protocol to obtain the first request;
• in response to obtaining the first request, provide the first request to a first single sign-on service of the single sign-on service system;
• convert a first response from the first protocol to the access protocol to generate a second response;
• and
• transmit the second response to the second tunnel proxy that facilitates providing the first response to the client device via the web interface;
• a first single sign-on service configured to:
• receive the first request from the first tunnel proxy;
• and
• in response to receiving the first request, generate an operation request to perform the management operation;
• and
• a data manager that transparently manages data access to a plurality of repositories that store a plurality of single sign-on data, the data manager configured to:
• determine that single sign-on data associated with the management operation request is associated with a first data repository of a plurality of data repositories;
• and
• generate the first response to the first request based on querying the first data repository using the operation request, wherein the first response is defined according to the first protocol.

A non-transitory computer readable storage medium including instructions stored thereon which, when executed by a processor, cause the processor to perform a method of operations comprising:

• first tunnel proxy operations comprising:
• receiving, from a second tunnel proxy of a single sign-on gateway, a management operation request, wherein:
• the second tunnel proxy converts a first request, received from a client device via a web interface, from a first protocol to an access protocol to generate the management operation request;
• and
• the management operation request identifies a management operation that is one of a credential management operation or a policy management operation;
• in response to receiving the management operation request, converting the management operation request from the access protocol to the first protocol to obtain the first request;
• converting a first response from the first protocol to the access protocol to generate a second response;
• and
• transmitting the second response to the second tunnel proxy that facilitates providing the first response to the client device via the web interface;
• single sign-on service operations comprising:
• generating an operation request to perform the management operation;
• and
• data manager operations comprising:
• transparently managing data access to a plurality of repositories that store a plurality of single sign-on data, the transparently managing comprising:
• determining that single sign-on data associated with the management operation request is associated with a first data repository of the plurality of data repositories;
• and
• generating the first response to the first request based on querying the first data repository using the operation request, wherein the first response is defined according to the first protocol.