Establishing and maintaining an improved single sign-on (SSO) facility
View Patent ↗A backend server system includes at least one hardware processor configured to initiate and/or perform the following. A login page is sent to a browser executing on a client associated with a user; and an authentication process is performed with the client. The logic page is intercepted by a proxy, and a modified logic page is generated by the proxy by adding a routine to the logic page. The modified logic page is forwarded to the browser, and the routine causes the browser to loads an asynchronous engine configured to execute a login process with an authentication profiling service to retrieve login information for the back-end server, and complete the authentication process.
1. A back-end server system, comprising:
at least one hardware processor configured to initiate and/or perform:
sending a login page to a browser executing on a client associated with a user; and
performing an authentication process with the client, wherein
the logic page is intercepted by a proxy,
a modified logic page is generated by the proxy by adding a routine to the logic page,
the modified logic page is forwarded to the browser,
the routine causes the browser to loads an asynchronous engine configured to
execute a login process with an authentication profiling service to retrieve login information for the back-end server, and
complete the authentication process.
2. The back-end system of claim 1 , wherein
the asynchronous engine is an AJAX engine.
3. The back-end system of claim 1 , wherein
the authentication profile service is configured to store, for the user, a user ID and password for the back-end server.
4. The back-end system of claim 1 , wherein
the authentication profile service is configured to store, for the user, a plurality of user IDs and passwords, respectively, for a plurality of back-end servers.
5. The back-end system of claim 1 , wherein
the asynchronous engine is further configured to update a password of the user on the back-end server responsive to a request by the user.
6. The back-end system of claim 1 , wherein
the authentication process is completed without the proxy hardware system after the routine is added to the login page.
7. The back-end system of claim 1 , wherein
the authentication process is a federated single sign-on process.
8. The back-end system of claim 1 , wherein the at least one hardware processor is further configured to initiate and/or perform
sending a change password page to the browser; wherein
the change password page is intercepted by the proxy,
a routine is added, by the proxy, to the change password page to generate a modified change password page, and
the modified change password page is forwarded to the browser.
9. The back-end system of claim 8 , wherein
the modified change password page, upon being executed by the browser, causes new password information to be forwarded to the authentication profiling service.
10. The back-end system of claim 8 , wherein
a password change is synchronized for each back-end server in which an original password is in common.
11. A computer program product, comprising:
a computer readable storage device having stored therein computer readable program code that, when executed by a back-end server system, causes the back-end server system to perform:
sending a login page to a browser executing on a client associated with a user; and
performing an authentication process with the client, wherein
the logic page is intercepted by a proxy,
a modified logic page is generated by the proxy by adding a routine to the logic page,
the modified logic page is forwarded to the browser,
the routine causes the browser to loads an asynchronous engine configured to
execute a login process with an authentication profiling service to retrieve login information for the back-end server, and
complete the authentication process.
12. The computer program product of claim 11 , wherein
the asynchronous engine is an AJAX engine.
13. The computer program product of claim 11 , wherein
the authentication profile service is configured to store, for the user, a user ID and password for the back-end server.
14. The computer program product of claim 11 , wherein
the authentication profile service is configured to store, for the user, a plurality of user IDs and passwords, respectively, for a plurality of back-end servers.
15. The computer program product of claim 11 , wherein
the asynchronous engine is further configured to update a password of the user on the back-end server responsive to a request by the user.
16. The computer program product of claim 11 , wherein
the authentication process is completed without the proxy hardware system after the routine is added to the login page.
17. The computer program product of claim 11 , wherein
the authentication process is a federated single sign-on process.
18. The computer program product of claim 11 , wherein the computer readable program code further causes the back-end server system to perform
sending a change password page to the browser; wherein
the change password page is intercepted by the proxy,
a routine is added, by the proxy, to the change password page to generate a modified change password page, and
the modified change password page is forwarded to the browser.
19. The computer program product of claim 18 , wherein
the modified change password page, upon being executed by the browser, causes new password information to be forwarded to the authentication profiling service.
20. The computer program product of claim 18 , wherein
a password change is synchronized for each back-end server in which an original password is in common.