US 2020/0092280 A1 · SYSTEM AND METHOD FOR APPLICATIONS TO SHARE SINGLE SIGN ON THROUGH LIGHTWEIGHT DIRECTORY ACCESS PROTOCOL (LDAP) INTEGRATION

Abstract

The techniques described herein may be used to provide a user with access to distinct applications (with Lightweight Directory Access Protocol (LDAP) authentication) based on a single set of user credentials from the user. A server may receive user credentials from a user device. The server may authenticate the user of the user device by communicating with an LDAP server. After the user has been authenticated, the server may detect a request from the user device to access a first application with LDAP authentication. The server may create temporary credentials for the user, provide the temporary credentials to the application, receive an authentication request (that includes the temporary credentials) from the application, and authenticate the user based on a local copy of the temporary credentials. If/when the user requests access to a second application, the server may authenticate the user for the second application in a similar manner.

Claims20

Dependent claims

A device, comprising:

one or more processors configured to:
provide a token to a user device based on authenticating the user device;
receive a first request to access a first application, the first request including the token;
authenticate the first request to access the first application based on the token included in the first request;
identify a first subset of information, out of a set of information associated with the user device, for which the first application is authorized to access;
provide the first subset of information to the authenticated first application;
receive a second request to access a second application, the second request including the token and a second identifier of the second application;
authenticate the second request to access the second application based on the token included in the second request;
identify a second subset of information, out of the set of information associated with the user device, for which the first application is authorized to access;
and
provide the second subset of information to the authenticated second application.

8 more elements

A method, comprising:

providing a token to a user device based on authenticating the user device;
receiving a first request to access a first application, the first request including the token;
authenticating the first request to access the first application based on the token included in the first request;
identifying a first subset of information, out of a set of information associated with the user device, for which the first application is authorized to access;
providing the first subset of information to the authenticated first application;
receiving a second request to access a second application, the second request including the token and a second identifier of the second application;
authenticating the second request to access the second application based on the token included in the second request;
identifying a second subset of information, out of the set of information associated with the user device, for which the first application is authorized to access;
and
providing the second subset of information to the authenticated second application.

7 more elements

A non-transitory computer-readable medium, storing a plurality of processor-executable instructions to:

provide a token to a user device based on authenticating the user device;
receive a first request to access a first application, the first request including the token;
authenticate the first request to access the first application based on the token included in the first request;
identify a first subset of information, out of a set of information associated with the user device, for which the first application is authorized to access;
provide the first subset of information to the authenticated first application;
receive a second request to access a second application, the second request including the token and a second identifier of the second application;
authenticate the second request to access the second application based on the token included in the second request;
identify a second subset of information, out of the set of information associated with the user device, for which the first application is authorized to access;
and
provide the second subset of information to the authenticated second application.

7 more elements

Dependencies are inferred from the claim text.

System and method for applications to share single sign on through lightweight directory access protocol (ldap) integration

Life of this patent

System and method for applications to share single sign on through lightweight directory access protocol (ldap) integration

Life of this patent

Abstract

Claims20