# US 8,782,765 B2 · Techniques for environment single sign on > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,782,765 B2 - Document ID: US8782765B2 - Status: Granted - Kind: B2 - Application number: 13/616,079 - Filed: 2012-09-14 - Published: 2013-01-10 - Granted: 2014-07-15 - Earliest claimed: 2009-08-03 - Assignees: Novell, Inc. - Applicants: Nathaniel Kranendonk; Stephen R Carter - Inventors: Nathaniel Kranendonk; Stephen R Carter - Web page: https://patentgrep.com/patent/US8782765B2 ## CPC - H04L 63/0815: {providing single-sign-on or federations} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Techniques for environment single sign on are provided. Multiple identifiers for devices are associated as a single environment. A principal can be authenticated via any of the devices once to access protected resources and once authenticated the principal can access the protected resources from the other devices without re-authenticating. ## Claims ### Claim 1 A method residing in non-transitory a computer-readable storage medium as executable instructions that are executed by a processor to perform the method, comprising: authenticating, via the processor, a principal for access to a protected resource; establishing, via the processor, a first session for the first device and a second session for a second device that is also accessible to the principal; and allowing, via the processor, the principal to access the protected resource and one or more other protected resources, without re-authenticating to the second device. ### Claim 2 (depends on 1) The method of claim 1, wherein authenticating further includes authenticating the principal after intercepting a request made by the principal for the protected resource. ### Claim 3 (depends on 1) The method of claim 1, wherein establishing further includes creating a processing environment for the first and second devices. ### Claim 4 (depends on 3) The method of claim 3, wherein creating further includes recognizing the first and second devices as virtual machines. ### Claim 5 (depends on 1) The method of claim 1, wherein allowing further includes using the first device as a proxy to the second device. ### Claim 6 (depends on 5) The method of claim 5, wherein using further includes recognizing the proxy as a forward proxy to the second device. ### Claim 7 (depends on 1) The method of claim 1, wherein allowing further includes providing the principal a first session identifier for accessing the first authenticated session and access to the first protected resource. ### Claim 8 (depends on 7) The method of claim 7, wherein providing further includes keeping a second session identifier for access the second authenticated session with the first device on behalf of the principal. ### Claim 9 A method residing in non-transitory a computer-readable storage medium as executable instructions that are executed by a processor to perform the method, comprising: associating, by the processor, a processing environment comprising a first device and a second device; and allowing, by the processor, allowing single sign-on within the processing environment, the processing environment including protected resources associated with the first device and the second device. ### Claim 10 (depends on 9) The method of claim 9, wherein receiving further includes recognizing the processing environment as a virtual processing environment. ### Claim 11 (depends on 10) The method of claim 10, wherein recognizing further includes identifying the first device as a first virtual machine and the second device as a second virtual machine. ### Claim 12 (depends on 11) The method of claim 11, wherein identifying further includes packaging the first virtual machine and the second virtual machine as a set to form the virtual processing environment. ### Claim 13 (depends on 9) The method of claim 9 further comprising, using, via the processor, the first device as a proxy for access to the second device. ### Claim 14 (depends on 9) The method of claim 9, wherein allowing further includes establishing a first session when a user authenticates to the first device and automatically creating a second session for the user to access the second device. ### Claim 15 A multiprocessor-implemented system, comprising: a device having memory and a processor; and a service implemented in a non-transitory computer-readable storage medium and to execute on the device; wherein the service is configured to form a single environment from multiple other devices and to permit single sign-on to multiple resources of the single environment to occur once. ### Claim 16 (depends on 15) The system of claim 15, wherein authentication for the single sign-on can occur on the device or any of the other devices. ### Claim 17 (depends on 15) The system of claim 15, wherein the device and the other devices are each an independent virtual machine. ### Claim 18 (depends on 15) The system of claim 15, wherein the service is configured to establish sessions between the device and the other devices for an authenticated principal using the single sign-on. ### Claim 19 (depends on 15) The system of claim 15, wherein the device is configured as a forward proxy to the other devices for the single sign-on. ### Claim 20 (depends on 15) The system of claim 15, wherein the service is configured to outsource initial authentication for the single sign-on to a third-party authentication service.