Centralized user authentication system apparatus and method

A system to authenticate a user, the system comprising:

• a computer system comprising computer hardware, the computer system programmed to implement:
• a directory-based authentication sever that authenticates users based on directory objects;
• a non-directory based legacy identification subsystem that is not configured for directory-based authentication;
• an enhanced authentication module in communication with the directory-based server and the non-directory based legacy identification subsystem wherein the enhanced authentication module obtains a directory object reference from an encrypted password field stored in the legacy identification system and provides the directory object reference to the directory-based authentication system;
• wherein the non-directory based legacy identification subsystem comprises an encrypted password field having a directory object reference stored therein, the directory object reference configured to reference a directory object that is stored separately from the legacy identification system, wherein the directory object is configured to uniquely identify a specified user, and wherein the directory object reference is stored in the encrypted password field instead of storing an encrypted password in the encrypted password field;
• wherein the authentication module is configured to generate a request for the encrypted password field of a specified user from the identification subsystem, and in response to receiving the contents, access the encrypted password field in the legacy system to obtain the directory object reference stored therein, and
• wherein the authentication module further configured to obtain the directory object reference from the encrypted password field rather than a password and to transmit the directory object reference to the directory-based authentication server;
• and
• wherein the directory-based authentication sever accesses the directory object stored separately from the non-directory based legacy system based on the directory object reference provided by the enhanced authentication module to authenticate the specified user against the directory object.