Single sign-on method in multi-application framework
View Patent ↗A method and system for allowing a single-sign on to access independently purveyed applications with a highly secure single-sign methodology which permits wide area public access, such as through the Internet, to private access weaker credentialed sign-on applications without a need to upgrade the credential requirements for access to the applications.
1. A method for single sign-on to servers in a client-server network comprising:
receiving at a framework server a request from a browser via a load balancer, said load balancer decrypting said request and including digital sign-on credentials;
sending an encrypted response from said framework server configured to generate a number of application Iframes and a connection between said framework server and said browser;
receiving at a proxy server, a request from a URL within one or more of said Iframes via said load balancer;
causing said proxy server in conjunction with said framework server to authenticate said credentials;
determining, by said proxy server, the applications requested and confirming that said applications reside on applications servers;
providing, by said proxy server, credentials required for sign-on to appropriate application servers;
causing an indirect communicative connection between said browser and said appropriate application servers through said proxy server; and
causing content from said appropriate applications servers to be supplied to said proxy server, wherein said content is further supplied to said browser.
2. The method of claim 1 wherein said providing, by said proxy server, credentials required for sign-on to appropriate application servers is effectuated by way of a pointer associating said digital sign-on credentials for the client-server system with said credentials required for sign-on to said appropriate application servers.
3. The method of claim 1 wherein said applications requested are accessible through a private-access network.
4. The method of claim 1 wherein said applications requested are accessible through a publicly-accessible network.
5. The method of claim 4 wherein the publicly-accessible network is the Internet.
6. The method of claim 1 wherein the client-server network is a publicly-accessible network.