System and method for implementing a proxy authentication server to provide authentication for resources not located behind the proxy authentication server
View Patent ↗Networked resources that are not located behind a proxy authentication server may be enabled to use the proxy authentication server for authentication. This may provide one or more of the features associated with a proxy authentication server (e.g., centralized administration of authentication and/or access information, enhancing software security, centralized administration of permission information, and/or other features) for the resources not located behind the proxy authentication server. These features may be provided without requiring substantial modification of the proxy authentication server.
1. A system configured to enable networked resources not behind a proxy authentication server to use the proxy authentication server for authentication, the system comprising:
electronic storage configured to store information related to one or more users, wherein the stored information for individual users includes authentication information;
a proxy authentication server configured to act as an intermediary between a client operated by a user and one or more servers behind the proxy authentication server that are configured to serve client requests to a first set of one or more resources, the proxy authentication server being further configured to authenticate the client based on a comparison between authentication information received from the client and authentication information stored in the electronic storage;
an identification server communicatively linked with the proxy and configured to transmit an identifier that authenticates the client to one or more servers not behind the proxy authentication server;
wherein the proxy authentication server and the identification server are further configured to (i) receive an authentication request from a server that is not located behind the proxy server and is configured to serve client resources to a second set of one or more resources, (ii) in response to receiving such a request, to initiate a determination by the proxy authentication server as whether or not the client is currently authenticated by the proxy authentication server, and (iv) to transmit the identifier from the identification server to the server not behind the proxy authentication server only if the proxy authentication server determines that the client is currently authenticated.
2. The system of claim 1 , wherein the proxy authentication server and the identification server are further configured to direct the client to the proxy authentication server to enable the proxy authentication server to request authentication information from the client only if the proxy authentication server determines that the client is not currently authenticated.
3. The system of claim 2 , wherein the proxy authentication server is further configured such that if the client is not currently authenticated and is directed to the proxy authentication server, the proxy authentication server (i) requests authentication information from the client, (ii) receives authentication information from the client, (iii) compares the received authentication information with authentication information stored in the electronic storage, (iv) authenticates the client only if the received authentication information corresponds to stored authentication information, and (v) transmits an indication of the authentication to the identification server.
4. The system of claim 3 , wherein the identification server is further configured to receive the indication of the authentication of the client from the proxy authentication server, and to transmit the identifier to the server not behind the proxy authentication server in response to reception of the indication of authentication.
5. The system of claim 1 , wherein the client comprises a processor executing a web browser application.
6. The system of claim 1 , wherein the identification server comprises an identity provider.
7. The system of claim 6 , wherein the identity provider is an OpenID provider.
8. The system of claim 1 , wherein the authentication information comprises login information.
9. The system of claim 8 , wherein the login information includes a user identification and a password.
10. A method of enabling of networked resources not behind a proxy authentication server to use the proxy authentication server for authentication, the method comprising:
receiving, at an identification server and/or a proxy authentication server communicatively linked with each other, a request from a server not behind the proxy authentication server for an identifier that authenticates a client to the server not behind the proxy authentication server;
determining, via the proxy authentication server, whether the client is currently authenticated to the proxy authentication server; and
transmitting the identifier from the identification server to the server not behind the proxy authentication server only if the proxy authentication server determines that the client is currently authenticated to the proxy authentication server.
11. The method of claim 10 , further comprising directing the client to the proxy authentication server to enable the proxy authentication server to request authentication information from the client only if the proxy authentication server determines that the client is not currently authenticated.
12. The method of claim 11 , further comprising:
storing information related to one or more users to machine-readable electronic storage media, wherein the stored information for individual users includes authentication information;
transmitting a request from the proxy authentication server to the client for authentication information from the client;
receiving authentication information at the proxy authentication server from the client;
comparing the received authentication information with authentication information stored in the electronic storage media;
authenticating the client only if the received authentication information corresponds to stored authentication information; and
transmitting an indication of the authentication from the proxy authentication server to the identification server.
13. The method of claim 12 , further comprising:
receiving the indication of the authentication of the client from the proxy authentication server; and
transmitting the identifier to the server not behind the proxy authentication server in response to reception of the indication of authentication.
14. The method of claim 10 , wherein the client comprises a processor executing a web browser application.
15. The method of claim 10 , wherein the identification server comprises an identity provider.
16. The method of claim 15 , wherein the identity provider is an OpenID provider.
17. The method of claim 10 , wherein the authentication information comprises login information.
18. The method of claim 17 , wherein the login information includes a user identification and a password.