Establishing and maintaining an improved single Sign-on (SSO) facility
View Patent ↗A login page is sent, by a backend server system, to a browser executing on a client associated with a user; and an authentication process is performed by the backend server system with the client. The logic page is intercepted by a proxy, and a modified logic page is generated by the proxy by adding a routine to the logic page. The modified logic page is forwarded to the browser, and the routine causes the browser to loads an asynchronous engine configured to execute a login process with an authentication profiling service to retrieve login information for the back-end server, and complete the authentication process.
1. A computer-implemented method performed within and by a back-end server system, comprising:
sending a login page to a browser executing on a client associated with a user; and
performing an authentication process with the client, wherein
the logic page is intercepted by a proxy,
a modified logic page is generated by the proxy by adding a routine to the logic page,
the modified logic page is forwarded to the browser,
the routine causes the browser to loads an asynchronous engine configured to
execute a login process with an authentication profiling service to retrieve login information for the back-end server, and
complete the authentication process.
2. The computer-implemented method of claim 1 , wherein
the asynchronous engine is an AJAX engine.
3. The computer-implemented method of claim 1 , wherein
the authentication profile service is configured to store, for the user, a user ID and password for the back-end server.
4. The computer-implemented method of claim 1 , wherein
the authentication profile service is configured to store, for the user, a plurality of user IDs and passwords, respectively, for a plurality of back-end servers.
5. The computer-implemented method of claim 1 , wherein
the asynchronous engine is further configured to update a password of the user on the back-end server responsive to a request by the user.
6. The computer-implemented method of claim 1 , wherein
the authentication process is completed without the proxy hardware system after the routine is added to the login page.
7. The computer-implemented method of claim 1 , wherein
the authentication process is a federated single sign-on process.
8. The computer-implemented method of claim 1 , further comprising
sending a change password page to the browser; wherein
the change password page is intercepted by the proxy,
a routine is added, by the proxy, to the change password page to generate a modified change password page, and
the modified change password page is forwarded to the browser.
9. The computer-implemented method of claim 8 , wherein
the modified change password page, upon being executed by the browser, causes new password information to be forwarded to the authentication profiling service.
10. The computer-implemented method of claim 8 , wherein
a password change is synchronized for each back-end server in which an original password is in common.