Establishing and maintaining an improved single sign-on (SSO) facility
View Patent ↗A login page being sent to a browser executing on a client associated with a user from a back-end server is intercepted. A routine is added to the login page to generate a modified login page. The modified login page is forwarded to the browser. The browser, upon executing the routine, loads an asynchronous engine configured to execute a login process with an authentication profiling service to retrieve login information for the back-end server, and complete an authentication process with the back-end server.
1. A computer-implemented method performed by a proxy hardware system, comprising:
intercepting, from a back-end server, a login page being sent to a browser executing on a client associated with a user;
adding a routine to the login page to generate a modified login page; and
forwarding the modified login page to the browser, and
the browser, upon executing the routine, loads an asynchronous engine configured to
execute a login process with an authentication profiling service to retrieve login information for the back-end server, and
complete an authentication process with the back-end server.
2. The computer-implemented method of claim 1 , wherein
the asynchronous engine is an AJAX engine.
3. The computer-implemented method of claim 1 , wherein
the authentication profile service is configured to store, for the user, a user ID and password for the back-end server.
4. The computer-implemented method of claim 1 , wherein
the authentication profile service is configured to store, for the user, a plurality of user IDs and passwords, respectively, for a plurality of back-end servers.
5. The computer-implemented method of claim 1 , wherein
the asynchronous engine is further configured to update a password of the user on the back-end server responsive to a request by the user.
6. The computer-implemented method of claim 1 , wherein
the authentication process is completed without the proxy hardware system after the routine is added to the login page.
7. The computer-implemented method of claim 1 , wherein
the authentication process is a federated single sign-on process.
8. The computer-implemented method of claim 1 , further comprising
intercepting, from the back-end server, a change password page being sent to the browser;
adding a routine to the change password page to generate a modified change password page; and
forwarding the modified change password page to the browser.
9. The computer-implemented method of claim 8 , wherein
the modified change password page, upon being executed by the browser, causes new password information to be forwarded to the authentication profiling service.
10. The computer-implemented method of claim 8 , wherein
a password change is synchronized for each back-end server in which an original password is in common.