US 2024/0205233 A1 · Selective Access to Computing Systems Based on Authentication Mechanisms

Abstract

A system can be provided that can determine a first subset of external identity providers associated with permitted access to software applications of an internal computing system. The system can also determine a second subset of external identity providers associated with denied access to the software applications. Additionally, the system can generate a mapping that associates permitted access to the software applications with the first subset of external identity providers and associates denied access to the software applications with the second subset of external identity providers. The system can further receive, from the user device, authentication data. The user device can obtain the authentication data using an external identity provider. The system can detect the external identity provider from the authentication data and, in response to detecting the external identity provider, the system can control access for the user device to the software applications based on the mapping.

Claims20

Dependent claims

A system comprising:

a processing device;
and
a memory device that includes instructions executable by the processing device for causing the processing device to perform operations comprising:
determining a first subset of a plurality of external identity providers associated with permitted access to at least one software application of an internal computing system;
determining a second subset of the plurality of external identity providers associated with denied access to the at least one software application of the internal computing system;
generating a mapping that associates permitted access to the at least one software application with the first subset and associates denied access to the at least one software application with the second subset;
receiving authentication data from a user device using an external identity provider of the plurality of external identity providers;
and
controlling access for the user device to the at least one software application based on the mapping and the external identity provider associated with the authentication data.

6 more elements

A non-transitory computer-readable medium comprising instructions that are executable by a processing device for causing the processing device to perform operations comprising:

determining a first subset of a plurality of external identity providers associated with permitted access to at least one software application of an internal computing system;
determining a second subset of the plurality of external identity providers associated with denied access to the at least one software application of the internal computing system;
generating a mapping that associates permitted access to the at least one software application with the first subset and associates denied access to the at least one software application with the second subset;
receiving authentication data from a user device using an external identity provider of the plurality of external identity providers;
and
controlling access for the user device to the at least one software application based on the mapping and the external identity provider associated with the authentication data.

3 more elements

Dependencies are inferred from the claim text.

Selective Access to Computing Systems Based on Authentication Mechanisms

Life of this patent

Selective Access to Computing Systems Based on Authentication Mechanisms

Life of this patent

Abstract

Claims20