Serialized authentication and authorization services

A system for authenticating and authorizing access to different user Applications on networked server computers, comprising:

• client devices for initiating access to an Application on networked server computers hosting a plurality of available user Applications, accessible through validation with different user authentication Security Systems and different user authorization Security Systems, by using Application name and user access credentials;
• authentication and authorization Web Services servers having access to different user authentication Security Systems and different authorization Security Systems and with the authentication and authorization Web Services servers arranged to initiate access to the different Security Systems when called by interfacing with the different authentication Security Systems and different authorization Security Systems according to the respective programming language employed by each of the respective authentication Security Systems and authorization Security Systems in response to a request for User access;
• and
• an authentication and authorization Services Manager server arranged to process a username, user access credentials, a predefined authentication list of authentication Services and a predefined authorization list of authorization Services for User access to the networked server computers and translate the authentication list of authentication Services and the authorization list of authorization Services into a corresponding authentication Web address list and a corresponding authorization Web address list in the same order as the authentication list and authorization list with each list providing the sequential order in which the list entries will be called to initiate access to the different Security Systems, initially by said Web authentication Services server from the authentication Web address list for authentication of user access credentials, and then in response to receipt of authentication return messages from user authentication Security System, as called by said Web authorization Services server from the authorization Web address list, for authorization of user access credentials and Application name and receipt of authorization return messages from the authorization Security System.

A method for authenticating and authorizing access to Applications in different user systems on networked server computers, comprising:

• receiving a username, password and an Application name;
• providing a predefined authentication list of user authentication Services in the order in which they are to be called for authentication;
• providing a predefined authorization list of the user authorization Services in the order in which they will be called for authorization;
• creating an authentication Web address list of the Web addresses corresponding to each authentication Service on the authentication list in the same order as the authentication list;
• creating an authorization Web address list of the Web addresses corresponding to each of the authorization Services on the authorization list in the same order as the authorization list;
• sequentially sending the username and password to each of the Web addresses on said authentication Web address list in the order in which they are listed to initiate interfacing user access and responses from authentication Security Systems indicating that the user name and password is accepted for access, the authentication list is completed or the User password is recognized but found invalid, expired, locked or otherwise ineligible for present authentication;
• and
• when a password is accepted by an authentication Security System, sequentially sending the username and Application name to of the Web addresses on the authorization Web address list in the order in which they are listed to initiate interfacing user access and responses from authorization Security Systems indicating that the user name and Application name are accepted for access, the username and Application name are found in an entry but the access is denied, expired, pending approval or other status that differs from granting access, or the authorization list is completed.

A computer program product for authenticating and authorizing access to Applications in different user systems on networked server computers, comprising:

• a non-transitory computer readable storage medium having computer usable program code embodied therewith, the computer usable program code comprising:
• computer readable program code configured to process a username, password, an Application name, an authentication list with the names of respective ones of a plurality of authentication Services of authentication Security Systems and an authorization list with names of respective ones of a plurality of authorization Services of authorization Security Systems;
• computer readable program code configured to create an authentication Web address list of the Web addresses corresponding to each of the authentication Services on the authentication list in the same order as the authentication list;
• computer readable program code configured to create an authorization Web address list of the Web addresses corresponding to each of the authorization Services on the authorization list;
• computer readable program code configured to sequentially send the username and password to each of the Web addresses on the authentication Web address list in the order in which they are listed to initiate interfacing User access to and responses from the authentication Security Systems indicating that the username and password is accepted for access, the authentication list is completed or the User password is recognized but found invalid, expired, locked or otherwise ineligible for present authentication;
• and
• computer readable program code configured so that when a password is accepted by an authentication Security System, the program code acts to sequentially send the username and Application name to each of the Web addresses on the authorization Web address list in the order in which they are listed to initiate interfacing User access to and responses from the authorization Security Systems, indicating that the username and Application name are accepted for access, the authorization list is completed or the username and Application name are matched but access is denied, invalid or has a status that otherwise will not grant access at the time of the access attempt.