Managing identity provider (IdP) identifiers for web real-time communications (WebRTC) interactive flows, and related methods, systems, and computer-readable media
Embodiments include managing Identity Provider (IdP) identifiers for Web Real-Time Communications (WebRTC) interactive flows, and related methods, systems, and computer-readable media. In one embodiment, a method for managing IdPs comprises selecting, by a WebRTC client executing on a computing device, one or more preferred IdP identifiers indicated by one or more preferences from a plurality of IdP identifiers corresponding to a plurality of IdPs for providing identity assertions during an establishment of a WebRTC interactive flow. The method further comprises obtaining one or more identity assertions from respective ones of the plurality of IdPs corresponding to the one or more preferred IdP identifiers. The method also comprises providing, during the establishment of the WebRTC interactive flow, the one or more identity assertions. In this manner, an entity may specify the IdP used for identity authentication, and the number of identity assertions provided during initiation of the WebRTC interactive flow.
1. A method for managing Identity Provider (IdP) identifiers for Web Real-Time Communications (WebRTC) interactive flows, comprising:
selecting, by a WebRTC client executing on a computing device, a preferred IdP identifier, based on one or more preferences, from a plurality of different IdP identifiers corresponding to a plurality of different IdPs, each different IdP configured to provide a different identity assertion to the WebRTC client upon request during an establishment of a WebRTC interactive flow;
obtaining a preferred identity assertion from an IdP corresponding to the preferred IdP identifier by:
intercepting, by the WebRTC client, a WebRTC Application Programming Interface (API) call by a WebRTC web application to obtain an identity assertion; and
modifying the WebRTC API call to incorporate the preferred IdP identifier; and
providing, during the establishment of the WebRTC interactive flow, the preferred identity assertion.
2. The method of claim 1 , wherein the plurality of different IdP identifiers comprises:
one or more IdP identifiers received from an enterprise policy server communicatively coupled to the WebRTC client;
one or more IdP identifiers stored by the WebRTC client;
one or more IdP identifiers hardcoded into the WebRTC client; or
one or more IdP identifiers provided by a WebRTC web application downloaded by the WebRTC client; or
combinations thereof.
3. The method of claim 1 , further comprising providing, during the establishment of the WebRTC interactive flow, one or more authentications corresponding to respective ones of one or more intermediate network elements.
4. The method of claim 3 , wherein the one or more intermediate network elements comprise a Session Traversal Utilities for Network Address Translation (STUN) server or a Traversal Using Relays around Network Address Translation (TURN) server, or combinations thereof.
5. The method of claim 1 , wherein one or more of the plurality of different IdP identifiers comprise an identity provider name, a protocol, or a username, or combinations thereof.
6. The method of claim 1 , wherein the one or more preferences comprises a preference flag associated with one of the plurality of different IdP identifiers.
7. The method of claim 1 , wherein the one or more preferences comprises an enterprise policy specified by an enterprise policy server.
8. The method of claim 1 , wherein the one or more preferences comprises a preference indicated by a user input.
9. A method for managing Identity Provider (IdP) identifiers for Web Real-Time Communications (WebRTC) interactive flows, comprising:
selecting, by a WebRTC client executing on a computing device, a preferred IdP identifier, based on one or more preferences, from a plurality of different IdP identifiers corresponding to a plurality of different IdPs, each different IdP configured to provide a different identity assertion to the WebRTC client upon request during an establishment of a WebRTC interactive flow;
obtaining a preferred identity assertion from an IdP corresponding to the preferred IdP identifier; and
providing, during the establishment of the WebRTC interactive flow, the preferred identity assertion by:
intercepting, by the WebRTC client, a WebRTC Application Programming Interface (API) call by a WebRTC web application to establish a WebRTC offer/answer; and
modifying the WebRTC API call to incorporate the preferred identity assertion.
10. A system for managing Identity Provider (IdP) identifiers for Web Real-Time Communications (WebRTC) interactive flows, comprising:
at least one communications interface;
a computing device associated with the at least one communications interface and comprising an IdP identifier management agent configured to:
select a preferred IdP identifier, based on one or more preferences, from a plurality of different IdP identifiers corresponding to a plurality of different IdPs, each different IdP configured to provide a different identity assertion to the WebRTC client upon request during an establishment of a WebRTC interactive flow;
obtain a preferred identity assertion from an IdP corresponding to the preferred IdP identifier via the at least one communications interface by:
intercepting a WebRTC Application Programming Interface (API) call by a WebRTC web application to obtain an identity assertion; and
modifying the WebRTC API call to incorporate the preferred IdP identifier; and
provide, during the establishment of the WebRTC interactive flow, the preferred identity assertion.
11. The system of claim 10 , wherein the IdP identifier management agent is configured to select the preferred IdP identifier from among:
one or more IdP identifiers received from an enterprise policy server communicatively coupled to the computing device;
one or more IdP identifiers stored by the computing device;
one or more IdP identifiers hardcoded into the IdP identifier management agent; or
one or more IdP identifiers provided by a WebRTC web application downloaded by the computing device; or
combinations thereof.
12. The system of claim 10 , wherein the IdP identifier management agent is further configured to provide, during the establishment of the WebRTC interactive flow, one or more authentications corresponding to respective ones of one or more intermediate network elements.
13. A system for managing Identity Provider (IdP) identifiers for Web Real-Time Communications (WebRTC) interactive flows, comprising:
at least one communications interface;
a computing device associated with the at least one communications interface and comprising an IdP identifier management agent configured to:
select a preferred IdP identifier, based on one or more preferences, from a plurality of different IdP identifiers corresponding to a plurality of different IdPs, each different IdP configured to provide a different identity assertion to a WebRTC client executing on the computing device upon request during an establishment of a WebRTC interactive flow;
obtain a preferred identity assertion from an IdP corresponding to the preferred IdP identifier via the at least one communications interface; and
provide, during the establishment of the WebRTC interactive flow, the preferred identity assertion by:
intercepting a WebRTC Application Programming Interface (API) call by a WebRTC web application to establish a WebRTC offer/answer; and
modifying the WebRTC API call to incorporate the preferred identity assertion.
14. A non-transitory computer-readable medium having stored thereon computer-executable instructions to cause a processor to implement a method, comprising:
selecting, by a Web Real-Time Communications (WebRTC) client, a preferred IdP identifier, based on one or more preferences, from a plurality of different IdP identifiers corresponding to a plurality of different IdPs, each different IdP configured to provide a different identity assertion to the WebRTC client upon request during an establishment of a WebRTC interactive flow;
obtaining a preferred identity assertion from an IdP corresponding to the preferred IdP identifier by:
intercepting, by the WebRTC client, a WebRTC Application Programming Interface (API) call by a WebRTC web application to obtain an identity assertion; and
modifying the WebRTC API call to incorporate the preferred IdP identifier; and
providing, during the establishment of the WebRTC interactive flow, the preferred identity assertion.
15. The non-transitory computer-readable medium of claim 14 having stored thereon the computer-executable instructions to cause the processor to implement the method, wherein the plurality of different IdP identifiers comprises:
one or more IdP identifiers received from an enterprise policy server communicatively coupled to the WebRTC client;
one or more IdP identifiers stored by the WebRTC client;
one or more IdP identifiers hardcoded into the WebRTC client; or
one or more IdP identifiers provided by a WebRTC web application downloaded by the WebRTC client; or
combinations thereof.
16. The non-transitory computer-readable medium of claim 14 having stored thereon the computer-executable instructions to cause the processor to implement the method, further comprising providing, during the establishment of the WebRTC interactive flow, one or more authentications corresponding to respective ones of one or more intermediate network elements.
17. A non-transitory computer-readable medium having stored thereon computer-executable instructions to cause a processor to implement a method, comprising:
selecting, by a Web Real-Time Communications (WebRTC) client, a preferred IdP identifier, based on one or more preferences, from a plurality of different IdP identifiers corresponding to a plurality of different IdPs, each different IdP configured to provide a different identity assertion to the WebRTC client upon request during an establishment of a WebRTC interactive flow;
obtaining a preferred identity assertion from an IdP corresponding to the preferred IdP identifier; and
providing, during the establishment of the WebRTC interactive flow, the preferred identity assertion by:
intercepting, by the WebRTC client, a WebRTC Application Programming Interface (API) call by a WebRTC web application to establish a WebRTC offer/answer; and
modifying the WebRTC API call to incorporate the preferred identity assertion.