Bookmarking Support for Federated Login Pages
AssigneeCitrix Systems, Inc.
InventorThomas Kludy
Life of this patent
Estimating the term…
Abstract
Methods and systems for handling of invalid state parameters during authentication are described herein. A computing device may receive, from a web browser executing on a user device, first data. That data may comprise an indication of authentication of authentication credentials and a first state parameter. Based on that first state parameter being invalid, the computing device may generate a new state parameter and redirect the web browser to a web page associated with an identity provider application. The computing device may then receive, from the web browser, an indication of authentication of a cookie and the new state parameter. The computing device may provide, to the user device, access to one or more services.
Claims20
A computing device comprising:
- one or more processors;
- and
- memory storing instructions that, when executed by the one or more processors, cause the computing device to:
- receive, from a web browser executing on a user device, first data comprising:
- an indication of authentication, by an identity provider application executing on a second computing device, of user authentication credentials;
- and
- a first state parameter that corresponds to a session between the computing device and the user device;
- and
- based on determining that the first state parameter is invalid:
- generate a new state parameter;
- redirect the web browser to a web page associated with the identity provider application by providing, to the web browser, a uniform resource locator (URL) associated with the identity provider application;
- receive, from the web browser, second data comprising:
- an indication of authentication, by the identity provider application, of a cookie corresponding to the user authentication credentials;
- and
- the new state parameter;
- and
- provide, to the user device and based on the second data, access to one or more services.
A method comprising:
- receiving, by a computing device and from a web browser executing on a user device, first data comprising:
- an indication of authentication, by an identity provider application executing on a second computing device, of user authentication credentials;
- and
- a first state parameter that corresponds to a session between the computing device and the user device;
- and
- based on determining that the first state parameter is invalid:
- generating a new state parameter;
- redirecting the web browser to a web page associated with the identity provider application by providing, to the web browser, a uniform resource locator (URL) associated with the identity provider application;
- receiving, from the web browser, second data comprising:
- an indication of authentication, by the identity provider application, of a cookie corresponding to the user authentication credentials;
- and
- the new state parameter;
- and
- providing, to the user device and based on the second data, access to one or more services.
One or more non-transitory computer-readable media storing instructions that, when executed by one or more processors of a computing device, cause the computing device to:
- receive, from a web browser executing on a user device, first data comprising:
- an indication of authentication, by an identity provider application executing on a second computing device, of user authentication credentials;
- and
- a first state parameter that corresponds to a session between the computing device and the user device;
- and
- based on determining that the first state parameter is invalid:
- generate a new state parameter;
- redirect the web browser to a web page associated with the identity provider application by providing, to the web browser, a uniform resource locator (URL) associated with the identity provider application;
- receive, from the web browser, second data comprising:
- an indication of authentication, by the identity provider application, of a cookie corresponding to the user authentication credentials;
- and
- the new state parameter;
- and
- provide, to the user device and based on the second data, access to one or more services.
Dependencies are inferred from the claim text.