IP Library Granted Patent US 8,769,650
Granted Patent B2
US 8,769,650 · App. 13/617,795 · Granted Jul 1, 2014

Establishing and maintaining an improved single sign-on (SSO) facility

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,769,650
App. No.
13/617,795
Granted
Jul 1, 2014
Kind
B2
Abstract

A method for establishing and maintaining a Single Sign-on between a reverse proxy and a back-end server can include instigating an authentication process through a browser for a user to obtain access to the back-end server, intercepting a login page from the back-end server at the reverse proxy and adding a routine thereto, thereby loading an asynchronous engine on the browser executing a login process with an authentication profiling service, in order to retrieve the login information for the back-end server, and completing the authentication process with the back-end to allow the user access the back-end server through the asynchronous engine.

Claims (26)

1. A method for establishing and maintaining a Single Sign-on between a reverse proxy and a back-end server, comprising:

instigating an authentication process through a browser in order for a user to obtain access to the back-end server;

intercepting a login page from the back-end server at the reverse proxy and adding a routine to the login page, thereby loading an asynchronous engine on the browser executing a login process with an authentication profiling service to retrieve login information for the back-end server;

storing a user ID and a password in respect of one or more servers in the authentication profiling service;

completing the authentication process with the back-end server to allow the user access the back-end server through the asynchronous engine; and

synchronizing a password change for each server upon an original password being in common between the each server.

2. The method of claim 1 wherein the asynchronous engine is an AJAX engine.

3. The method of claim 1 , further comprising using the authentication profiling service for storing all user IDs and passwords for a user to enable connection to any server.

4. The method of claim 1 , further comprising:

responsive to a request by the user, the asynchronous engine updating the password of the user on the back-end server.

5. A method for creating an account for a Single Sign-on between a reverse proxy and a back-end server, comprising:

instigating an account request through a browser in order for a user to obtain access to the back-end server;

intercepting a request for information from the back-end server at the reverse proxy and adding a routine to the login page, thereby loading an AJAX engine between the browser and the reverse proxy executing an account creation process with an authentication profiling service by means of the AJAX engine to retrieve account information for the back-end server;

storing a user ID and a password in respect of one or more servers in the authentication profiling service;

sending the account information to the back-end server;

completing an authentication process to allow the user access to the back-end server through the AJAX engine; and

synchronizing a password change for each server upon an original password being is in common between the each server.

6. A method for changing a password in a Single Sign-on between a reverse proxy and a back-end server, comprising:

storing a user ID and a password in respect of one or more servers in the authentication profiling service;

instigating a change password process through a browser in order for a user to obtain access to the back-end server with a new password;

intercepting a login page from the back-end server at the reverse proxy and adding a routine to the login page, thereby loading an AJAX engine between the browser and the reverse proxy executing the change password process with an authentication profiling service using the AJAX engine to retrieve login information with the new password for the back-end server;

sending the login information and the new password to the back-end server for registration thereof;

completing an authentication process to allow the user access to the back-end server through the AJAX engine with the new password; and

synchronizing the change password with any other server which has the same original password.

7. The method of claim 1 wherein the routine is written in a language understandable by the browser.

8. The method of claim 1 wherein the routine is written in a javascript-style language.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 8, 2025
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: WORKDAY, INC.
Reel/Frame 073051/0916 →