Transfer apparatus, information processing system, non-transitory recording medium, and client apparatus

An information processing system comprising:

• an authentication/authorization server to perform authorization for resource access by a client or to perform authentication in response to a user authentication request made by the client;
• and
• a transfer apparatus, wherein the authentication/authorization server includes:
• a memory that stores information on the transfer apparatus, the information on the transfer apparatus being stored for the client as information on a delivery destination of a response parameter included in an authentication/authorization response to an authentication/authorization request, the authentication/authorization request including an authorization request made for the resource access by the client or the user authentication request;
• and
• first circuitry configured to:
• receive the authentication/authorization request;
• and
• transmit the response parameter to the transfer apparatus via a user agent with reference to the information on the transfer apparatus, and
• the transfer apparatus includes second circuitry configured to:
• obtain transfer destination information for designating a transfer destination of the response parameter;
• receive the response parameter from the authentication/authorization server via the user agent;
• and
• transfer, via the user agent, the received response parameter to the transfer destination indicated by the obtained transfer destination information.

A non-transitory recording medium storing a plurality of instructions which, when executed by one or more processors, causes the one or more processors to perform a process comprising:

• obtaining transfer destination information for designating a transfer destination of a response parameter related to an authentication/authorization response to an authentication/authorization request, the authentication/authorization request including an authorization request made for resource access by a client or a user authentication request made by the client;
• receiving the response parameter included in the authentication/authorization response from an authentication/authorization server via a user agent, the authentication/authorization server being a server to perform authorization for the resource access or to perform user authentication;
• and
• transferring, via the user agent, the received response parameter to the transfer destination indicated by the obtained transfer destination information.