Authentication proxy agent
View Patent ↗An authentication engine may be configured to receive an authentication request and credentials from a client. The authentication engine may then generate a proxy agent configured to interact with an identity provider to authenticate the client on behalf of the client, using the credentials. In this way, the authentication engine may receive an assertion of authentication of the client from the identity provider, by way of the proxy agent.
1. A system including instructions stored on a non-transitory computer readable storage medium and executable by at least one processor, the system comprising:
an authentication engine configured to cause the at least one processor to receive an authentication request and credentials from a client;
generate a proxy agent configured to interact with an identity provider to authenticate the client on behalf of the client, using the credentials; and
receive an assertion of authentication of the client from the identity provider, by way of the proxy agent.
2. The system of claim 1 , wherein the authentication engine is implemented by a mobile server providing services to the client, and the client includes a mobile client.
3. The system of claim 1 , wherein the authentication engine is configured to cause the at least one processor, in response to the receipt of the authentication request and credentials, to resolve a previously-stored authentication configuration, including identifying the identity provider from among a plurality of identity providers as being associated with the client.
4. The system of claim 1 , wherein the proxy agent is configured to store configuration data governing content, format, and timing of interactions with the identity provider.
5. The system of claim 1 , wherein the proxy agent includes a virtual browser manager configured to implement a virtual browser used to relay the credentials to the identity provider on behalf of the client.
6. The system of claim 5 , wherein the virtual browser manager is configured to access a virtual browser pool storing a plurality of available virtual browsers, and to select the virtual browser therefrom.
7. The system of claim 1 , wherein the proxy agent is configured to execute the Security Assertion Markup Language (SAML) standard with the identity provider, including receiving the assertion therefrom, on behalf of the client.
8. The system of claim 1 , further comprising a session manager configured to create a session for the client, based on the assertion.
9. The system of claim 8 , wherein the authentication engine is provided by a mobile server, and wherein the session provides access to multiple services of the mobile server to the client.
10. A method comprising:
receiving an authentication request and credentials from a client;
generating a proxy agent configured to interact with an identity provider to authenticate the client on behalf of the client, using the credentials; and
receiving an assertion of authentication of the client from the identity provider, by way of the proxy agent.
11. The method of claim 10 , wherein receiving the authentication request and credentials further comprises resolving a previously-stored authentication configuration, including identifying the identity provider from among a plurality of identity providers as being associated with the client.
12. The method of claim 10 , wherein the proxy agent is configured to store configuration data governing content, format, and timing of interactions with the identity provider.
13. The method of claim 10 , wherein the proxy agent includes a virtual browser manager configured to implement a virtual browser used to relay the credentials to the identity provider on behalf of the client.
14. The method of claim 10 , wherein the proxy agent is configured to execute the Security Assertion Markup Language (SAML) standard with the identify provider, including receiving the assertion therefrom, on behalf of the client.
15. A computer program product including instructions recorded on a non-transitory computer readable storage medium and configured to cause at least one processor to:
receive an authentication request and credentials from a client;
generate a proxy agent configured to interact with an identity provider to authenticate the client on behalf of the client, using the credentials; and
receive an assertion of authentication of the client from the identity provider, by way of the proxy agent.
16. The computer program product of claim 15 , wherein the instructions, when executed, are further configured, in response to the receipt of the authentication request and credentials, to resolve a previously-stored authentication configuration, including identifying the identity provider from among a plurality of identity providers as being associated with the client.
17. The computer program product of claim 15 , wherein the proxy agent is configured to store configuration data governing content, format, and timing of interactions with the identity provider.
18. The computer program product of claim 15 , wherein proxy agent includes a virtual browser manager configured to implement a virtual browser used to relay the credentials to the identity provider on behalf of the client.
19. The computer program product of claim 18 , wherein the virtual browser manager is configured to access a virtual browser pool storing a plurality of available virtual browsers, and to select the virtual browser therefrom.
20. The computer program product of claim 15 , wherein the proxy agent is configured to execute the Security Assertion Markup Language (SAML) standard with the identify provider, including receiving the assertion therefrom, on behalf of the client.