Establishing and maintaining an improved Single Sign-on (SSO) facility
View Patent ↗A method for establishing and maintaining a Single Sign-on between a reverse proxy and a back-end server can include instigating an authentication process through a browser for a user to obtain access to the back-end server, intercepting a login page from the back-end server at the reverse proxy and adding a routine thereto, thereby loading an asynchronous engine on the browser executing a login process with an authentication profiling service, in order to retrieve the login information for the back-end server, and completing the authentication process with the back-end to allow the user access the back-end server through the asynchronous engine.
1. A system comprising:
a data processing system configured to perform executable operations comprising:
instigating an authentication process through a browser in order for a user to obtain access to a back-end server;
intercepting a login page from the back-end server at a reverse proxy and adding a routine to the login page, thereby loading an asynchronous engine on the browser executing a login process with an authentication profiling service, in order to retrieve login information for the back-end server;
storing a user ID and a password in respect of one or more servers in the authentication profiling service;
completing the authentication process with the back-end server to allow the user access the back-end server through the asynchronous engine; and
synchronizing a password change for each server where an original password is in common.
2. The system of claim 1 wherein the asynchronous engine is an AJAX engine.
3. The system of claim 1 wherein the data processing system is further configured to perform an executable operation comprising:
using the authentication profiling service for storing all user IDs and passwords for a user to enable connection to any server.
4. The system of claim 1 wherein
responsive to a request by the user, the asynchronous engine updates the password of the user on the back-end server.
5. The system of claim 1 wherein the routine is written in a language understandable by the browser.
6. A computer program product, comprising:
a computer readable storage device having stored thereon program code that, when executed, configures a data processing system to perform executable operations comprising:
instigating an authentication process through a browser in order for a user to obtain access to a back-end server;
intercepting a login page from the back-end server at a reverse proxy and adding a routine to the login page, thereby loading an asynchronous engine on the browser executing a login process with an authentication profiling service, in order to retrieve login information for the back-end server;
storing a user ID and a password in respect of one or more servers in the authentication profiling service;
completing the authentication process with the back-end server to allow the user access the back-end server through the asynchronous engine; and
synchronizing a password change for each server where an original password is in common, wherein
the computer usable storage device is not a transitory, propagating signal per se.
7. The computer program product of claim 6 wherein the asynchronous engine is an AJAX engine.
8. The computer program product of claim 6 wherein the computer readable storage medium further stores program code that configures the data processing system to perform an executable operation comprising:
using the authentication profiling service for storing all user IDs and passwords for a user to enable connection to any server.
9. The computer program product of claim 6 wherein
responsive to a request by the user, the asynchronous engine updates the password of the user on the back-end server.
10. The computer program product of claim 6 wherein the routine is written in a language understandable by the browser.