Using a service-provider password to simulate f-sso functionality

A single-use SU-F-SSO system comprising a processor, a memory coupled to the processor, and a computer-readable hardware storage device coupled to the processor, the storage device containing program code configured to be run by the processor via the memory to implement a method for simulating Federated Single Sign-On (SU-F-SSO) functionality, the method comprising:

• the processor receiving, from an Identity Provider of an F-SSO federation, a notification that a user has submitted a single sign-on request for a secured service of a Service Provider,
• where an existing single sign-on authentication procedure of the Identity Provider authenticates a requestor's identity and identifies that the requester is authorized to access the secured service by comparing information comprised by the requestor's single sign-on request with a set of trusted data retrieved from a federated server of the F-SSO federation, and
• where the Identity Provider, as a function of the authenticating has previously:
• sent a response to the Service Provider indicating that the Identity Provider has authenticated the user,
• notified the processor that the Identity Provider has authenticated the user, and
• redirected the user to a SU-F-SSO endpoint managed by Service Provider;
• the processor identifying and authenticating the user privileges as a function of the notification;
• the processor creating an on-demand password;
• the processor storing a copy of the on-demand password in an information repository secured by the Service Provider;
• the processor transmitting the on-demand password to the user;
• and
• the processor redirecting the user to the Service Provider's local logon portal,
• where the user is granted single-sign on access to multiple services of the Service Provider in response to the user's submission of the on-demand password to the local logon portal.

A computer program product, comprising a computer-readable hardware storage device having a computer-readable program code stored therein, the program code configured to be executed by a Single-Use SU-F-SSO system comprising a processor, a memory coupled to the processor, and a computer-readable hardware storage device coupled to the processor, the storage device containing program code configured to be run by the processor via the memory to implement a method for simulating Federated Single Sign-On (SU-F-SSO) functionality, the method comprising:

• the processor receiving, from an identity Provider of an F-SSO federation, a notification that a user has submitted a single sign-on request for a secured service of a Service Provider,
• where an existing single sign-on authentication procedure of the Identity Provider authenticates a requestor's identity and identifies that the requestor is authorized to access the secured service by comparing information comprised by the requestor's single sign-on request with a set of trusted data retrieved from a federated server of the F-SSO federation, and
• where the Identity Provider, as a function of the authenticating has previously:
• sent a response to the Service Provider indicating that the Identity Provider has authenticated the user,
• notified the processor that the Identity Provider has authenticated the user, and
• redirected the user to SU-F-SSO endpoint managed by the Service Provider;
• the processor identifying and authenticating the user privileges as a function of the notification;
• the processor creating an on-demand password;
• the processor storing a copy of the on-demand password in an information repository secured by the Service Provider;
• the processor transmitting the on-demand password to the user;
• and
• the processor redirecting the user to the Service Provider's local logon portal,
• where the user is granted single-sign on access to multiple services of the Service Provider in response to the user's submission of the on-demand password to the local logon portal.