Disposition engine for single sign on (SSO) requests
AssigneeCisco Technology, Inc.
InventorsGunupuree Ravi, Vivek Vishnoi, Vivek Biswas, Prabhat Chaturvedi, Fowzy Shacker
Life of this patent
Estimating the term…
Abstract
Systems and methods are described for evaluating disposition of an SSO request. In one example, the method includes receiving the SSO request, the SSO request for accessing a secure service, the request having been denied authorization to access a first service, determining, based upon one or more criteria, where to direct the SSO request, and routing the SSO request to a second service, the routing based on the determining where to direct the SSO request.
Claims20
A method for evaluating disposition of a single sign on (SSO) request, the method comprising:
- receiving the SSO request, the SSO request for accessing a first one of a plurality of secure services;
- authenticating the SSO request by verifying an authentication token associated with the SSO request to yield an authenticated SSO request;
- determining which one of the plurality of secure services to direct the authenticated SSO request to, the determining comprising authorizing or denying the authenticated SSO request based upon one or more criteria to yield a determination;
- when the determination indicates that the authenticated SSO request is authorized, routing an authorized, authenticated SSO request to the first secure service;
- and
- when the determination indicates the authenticated SSO request is denied, routing a denied, authenticated SSO request to an SSO engine, the SSO engine automatically routing the denied, authenticated SSO request to a second secure service from among the plurality of secure services based on further determining that the denied, authenticated SSO request is authorized to access the second secure service.
A single sign-on (SSO) disposition engine for evaluating disposition of a SSO request, comprising:
- a processor;
- and
- a memory having computer-executable instructions that, when executed on the processor, cause the processor to:
- determine which one of a plurality of secure services to direct an authenticated SSO request to access a first secure service from among the plurality of secure services to, the determining comprising authorizing or denying the authenticated SSO request based upon one or more criteria to yield a determination;
- when the determination indicates that the authenticated SSO request is authorized, route an authorized, authenticated SSO request to the first secure service;
- and
- when the determination indicates the authenticated SSO request is denied, route a denied, authenticated SSO request to an SSO engine, the SSO engine automatically routing the denied, authenticated SSO request to a second secure service from among the plurality of secure services based on further determining that the denied, authenticated SSO request is authorized to access the second secure service.
A system for evaluating disposition of a single sign on (SSO) request, the system comprising:
- a first secure service;
- a second secure service;
- and
- a single sign-on (SSO) disposition engine adapted to:
- receive a denied, authenticated SSO request for accessing the first secure service, the SSO request having been denied authorization to access the first secure service, the SSO request having been authenticated by verifying an authentication token associated with the SSO request;
- determine, based upon one or more criteria, which one of a plurality of secure services to direct the denied, authenticated SSO request for accessing the first secure service to, the first secure service and the second secure service belonging to the plurality of secure services;
- and
- upon determining that the denied, authenticated SSO request is authorized to access the second secure service, automatically route the denied, authenticated SSO request to the second secure service.
Dependencies are inferred from the claim text.