System and method for single logout of applications
View Patent ↗A system includes an activity manager connected with a device, an application server and an identity provider. The activity manager clears a device session with both the identity provider and the application server to logout applications provided by the application server to the device.
1. A system, comprising:
a processor; and
memory, wherein the memory has stored therein instructions that, when executed by the processor, cause the processor to:
receive information on a first session associated with a first application executed for a user, wherein the first application is executed on a first device;
receive information on a second session associated with a second application executed for the user, wherein the second application is executed on a second device separate from the first device;
maintain information on the first and second sessions;
detect that a location of the second device is within a threshold distance from the first device;
merge the first and second sessions into a single session in response to the detecting;
receive indication of a user-interface interaction with the first application;
attribute the user-interface interaction to the second application in response to the second device being located within the threshold distance from the first device;
in response to receiving the indication of the user-interface interaction, keep open the first application and the second application;
monitor time elapsed since receiving the indication of the user-interface interaction without detecting another user-interface interaction with the first application and the second application; and
in response to determining that a preset amount of the time has elapsed, transmit a message to close the single session, wherein the closing of the single session ends the first and second applications.
2. The system of claim 1 , wherein the instructions that cause the processor to attribute the user-interface interaction to the second application include instructions that cause the processor to attribute despite lack of indication of independent user-interface activities with the second application.
3. The system of claim 1 , wherein the memory includes instructions that further cause the processor to:
provide a command to an identity provider to clear a session associated with the user.
4. The system of claim 1 , wherein the information include session identifiers of the first and second sessions, and a user ID associated with the user.
5. The system of claim 1 , wherein the user-interface interaction is movement of a user input device.
6. The system of claim 1 , wherein the user-interface interaction is input of a voice command.
7. The system of claim 1 , wherein the user-interface interaction is eye movement.
8. The system of claim 1 , wherein the instructions further cause the processor to:
detect that the second device is no longer located within the threshold distance from the first device; and
in response to detecting that the second device is no longer located within the threshold distance, separate the single session to respectively the first session and the second session.
9. The system of claim 1 , wherein the instructions further cause the processor to:
receive login credentials of a user from the first device for the first application; and
log-in the user to the first and second applications in response to receipt of the login credentials.
10. The system of claim 1 , wherein the instructions that cause the processor to close the single session include instructions that cause the processor to logout the user from the first and second applications.
11. The system of claim 1 , wherein the first and second applications are web applications.
12. A method comprising:
receiving, by a processor, information on a first session associated with a first application executed for a user, wherein the first application is executed on a first device;
receiving, by the processor, information on a second session associated with a second application executed for the user, wherein the second application is executed on a second device separate from the first device;
maintaining, by the processor, information on the first and second sessions;
detecting, by the processor, that a location of the second device is within a threshold distance from the first device;
merging, by the processor, the first and second sessions into a single session in response to the detecting;
receiving, by the processor, indication of a user-interface interaction with the first application;
attributing, by the processor, the user-interface interaction to the second application;
in response to receiving the indication of the user-interface interaction, keeping open the first application and the second application;
monitor time elapsed since receiving the indication of the user-interface interaction without detecting another user-interface interaction with the first application and the second application; and
in response to determining that a preset amount of the time has elapsed, transmitting, by the processor, a message to close the single session, wherein the closing of the single session ends the first and second applications.
13. The method of claim 12 , wherein the user-interface interaction is attributed to the second application despite lack of indication of independent user-interface activities with the second application.
14. The method of claim 12 further comprising:
providing, by the processor, a command to an identity provider to clear a session associated with the user.
15. The method of claim 12 , wherein the information include session identifiers of the first and second sessions, and a user ID associated with the user.
16. The method of claim 12 , wherein the user-interface interaction is movement of a user input device.
17. The method of claim 12 , wherein the user-interface interaction is input of a voice command.
18. The method of claim 12 , wherein the user-interface interaction is eye movement.
19. The method of claim 12 further comprising:
detecting, by the processor, that the second device is no longer located within the threshold distance from the first device; and
in response to detecting that the second device is no longer located within the threshold distance, separating, by the processor, the single session to respectively the first session and the second session.
20. The method of claim 12 further comprising:
receiving login credentials of a user from the first device for the first application; and
logging in the user to the first and second applications in response to receipt of the login credentials.