System and method for a token gateway environment

A system for providing tokens to facilitate authentication and access to protected resources, the system comprising:

• a token gateway computing system in electronic communication with a user computing system, at least one access management computing system, and a protected resource computing system, wherein the token gateway computing system is configured to:
• receive, from the user computing system, a first data packet including user credentials of a user and a request for an authentication token to access one or more protected resources from the protected resource computing system;
• transmit a second data packet to the at least one access management computing system based on a type associated with the one or more protected resources requested;
• receive, from the at least one access management computing system, validation of the user, and private data;
• generate a first token;
• generate a second token using the private data, wherein the second token comprises a first portion of the first token and additional data, and wherein the first token and the second token are based on a JavaScript Object Notation (JSON) web token standard;
• transmit the first token to the user computing system;
• receive, from the user computing system, a request to access one or more protected resources from the protected resource computing system, the request comprising the first token;
• validate the received first token;
• and
• transmit the second token to the protected resource computing system.

A computer-implemented method for providing tokens to facilitate authentication and access to protected resources, the computer-implemented method comprising, as implemented by one or more computing devices within a token gateway system configured with specific executable instructions:

• receiving, from a user computing system, a first data packet including user credentials of a user and a request for an authentication token to access one or more protected resources from a protected resource computing system;
• transmitting a second data packet to at least one access management computing system based on a type associated with the one or more protected resources requested;
• receiving, from the at least one access management computing system, validation of the user, and private data;
• generating a first token;
• generating a second token using the private data, wherein the second token comprises a first portion of the first token and additional data, and wherein the first token and the second token are based on a JavaScript Object Notation (JSON) web token standard;
• transmitting the first token to the user computing system;
• receiving, from the user computing system, a request to access one or more protected resources from the protected resource computing system, the request comprising the first token;
• validating the received first token;
• and
• transmitting the second token to the protected resource computing system.

A non-transitory computer storage medium storing computer-executable instructions that, when executed by a processor, cause the processor to at least:

• receive, from a user computing system, a first data packet including user credentials of a user and a request for an authentication token to access one or more protected resources from a protected resource computing system;
• transmit a second data packet to at least one access management computing system based on a type associated with the one or more protected resources requested;
• receive, from the at least one access management computing system, validation of the user, and private data;
• generate a first token;
• generate a second token using the private data, wherein the second token comprises a first portion of the first token and additional data, and wherein the first token and the second token are based on a JavaScript Object Notation (JSON) web token standard;
• transmit the first token to the user computing system;
• receive, from the user computing system, a request to access one or more protected resources from the protected resource computing system, the request comprising the first token;
• validate the received first token;
• and
• transmit the second token to the protected resource computing system.