Consolidated identity
AssigneeCitrix Systems, Inc.
InventorsPeter Yared, Tomas Kmec, Jan Surovec, Michal Gajdos, Omar ElNaggar
Life of this patent
Estimating the term…
Abstract
According to various embodiments, a consolidated identity system and method are implemented to provide improved identity management and resource access management, particularly in the context of an enterprise system that requires a tight trust model. In at least one embodiment, the described system and method provide mechanisms for mapping identities among resources. The system and method are able to extract information relevant to a particular entity, such as an employee or user, and to consolidate and/or personalize such information as needed.
Claims29
A computer-implemented method for consolidating identity information across an enterprise comprising a plurality of enterprise systems, comprising:
- copying a plurality of entitlements associated with a user from at least one of the enterprise systems to at least one other of the enterprise systems;
- authenticating a user at an identity provider;
- receiving a request from the user to access a resource associated with one of the enterprise systems;
- determining, based on at least one copy of at least one entitlement, whether the user is authorized to access the requested resource;
- responsive to the determination indicating that the user is authorized to access the requested resource, providing access to the requested resource;
- and
- responsive to the determination indicating that the user is not authorized to access the requested resource, denying access to the requested resource.
A non-transitory computer-readable medium for consolidating identity information across an enterprise comprising a plurality of enterprise systems, comprising instructions stored thereon, that when executed by at least one processor, perform the steps of:
- copying a plurality of entitlements associated with a user from at least one of the enterprise systems to at least one other of the enterprise systems;
- authenticating a user at an identity provider;
- receiving a request from the user to access a resource associated with one of the enterprise systems;
- determining, based on at least one copy of at least one entitlement, whether the user is authorized to access the requested resource;
- responsive to the determination indicating that the user is authorized to access the requested resource, providing access to the requested resource;
- and
- responsive to the determination indicating that the user is not authorized to access the requested resource, denying access to the requested resource.
A system for consolidating identity information across an enterprise comprising a plurality of enterprise systems, comprising:
- a processor, configured to:
- copy a plurality of entitlements associated with a user from at least one of the enterprise systems to at least one other of the enterprise systems;
- and
- authenticate a user at an identity provider;
- and
- an input device, configured to receive a request from the user to access a resource associated with one of the enterprise systems;
- wherein the processor is further configured to:
- determine, based on at least one copy of at least one entitlement, whether the user is authorized to access the requested resource;
- responsive to the determination indicating that the user is authorized to access the requested resource, provide access to the requested resource;
- and
- responsive to the determination indicating that the user is not authorized to access the requested resource, deny access to the requested resource.
Dependencies are inferred from the claim text.