US 8,621,589 B2 · Cross domain single sign on

Abstract

The present application provides a method and system for Cross Domain Single Sign On. The method comprises: receiving a request from a user to a service provider; processing the user request prior to relaying the request to the service provider; forwarding the processed request to the corresponding service provider according to the type of request; in response to receiving a response to the request from the service provider, processing the response, and forwarding the processed response to the user. By adopting the method and system of the present application, a Single Sign On management proxy is introduced as a united management system for a session lifetime of the user. The SSO management proxy manages operations of logging in, checking a session expiration and recovering, logging out, URL mapping, error processing, and access control, and effectively improves the availability, security, functional continuity of the service as well as the user's experience.

Claims18

Dependent claims

A method for processing Single Sign On (SSO) via a SSO management proxy system, wherein at least one service provider to be accessed by a user device associated with a user is located in at least one domain, the method comprising:

the SSO management proxy system receiving from a user device a request intended for at least one service provider;
the SSO management proxy system processing the request according to a type of the request;
in response to processing the request, the SSO management proxy system sending the processed request to the at least one service provider;
the SSO management proxy system receiving a response from the at least one service provider;
converting a uniform resource locator (URL) associated with the at least one service provider within the response into a converted URL that is associated with a single united domain;
and
in response to receiving the response from the at least one service provider, the SSO management proxy system sending the response, including the converted URL, back to the user device.

4 more elements

A SSO management proxy system for Single Sign On, wherein at least one service provider to be accessed by a user is located in at least one domain, the SSO management proxy system comprising:

a processing device;
and
program code that when executed on the processing device enables the SSO management proxy system to:
receive from a user device a request intended for at least one service provider;
process the request according to a type of the request;
in response to processing the request, send the processed request to the at least one service provider;
receive a response from the at least one service provider;
convert a uniform resource locator (URL) associated with the at least one service provider within the response into a converted URL that is associated with a single united domain;
and
in response to receiving the response from the at least one service provider, send the response, including the converted URL, back to the user.

7 more elements

Dependencies are inferred from the claim text.

Cross domain single sign on

Life of this patent

Cross domain single sign on

Life of this patent

Abstract

Claims18