IP Library Granted Patent US 9,686,267
Granted Patent B2
US 9,686,267 · App. 15/218,590 · Granted Jun 20, 2017

Establishing and maintaining an improved single sign-on (SSO) facility

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,686,267
App. No.
15/218,590
Granted
Jun 20, 2017
Kind
B2
Abstract

A client system associated with a user includes at least one hardware processor configured to initiate the following operations. A modified login page is received from a proxy hardware system. An asynchronous engine is loaded by a browser system executing on the client system and caused by a routine from the modified login page. A login process with an authentication profiling service is executed, using the asynchronous engine, to retrieve login information for a back-end server. The authentication process with the back-end server is completed using the asynchronous engine. The modified logic page is generated by the proxy hardware system by adding the routine to a login page being sent from the back-end server to the browser.

Claims (54)

1. A client system associated with a user, comprising:

at least one hardware processor configured to initiate the following operations:

receiving, from a proxy hardware system, a modified login page;

loading, by a browser system executing on the client system and caused by a routine from the modified login page, an asynchronous engine;

executing, using the asynchronous engine, a login process with an authentication profiling service to retrieve login information for a back-end server;

completing, using the asynchronous engine, the authentication process with the back-end server, wherein

the modified logic page is generated by the proxy hardware system by adding the routine to a login page being sent from the back-end server to the browser.

2. The client system of claim 1 , wherein

the asynchronous engine is an AJAX engine.

3. The client system of claim 1 , wherein

the authentication profiling service is configured to store, for the user, a user ID and password for the back-end server.

4. The client system of claim 1 , wherein

the authentication profiling service is configured to store, for the user, a plurality of user IDs and passwords, respectively, for a plurality of back-end servers.

5. The client system of claim 1 , wherein

the asynchronous engine is further configured to update a password of the user on the back-end server responsive to a request by the user.

6. The client system of claim 1 , wherein

the authentication process is completed without the proxy hardware system after the routine is added to the login page.

7. The client system of claim 1 , wherein

the authentication process is a federated single sign-on process.

8. A computer program product, comprising:

a computer readable storage device having stored therein computer readable program code that, when executed by a client system associated with a user, causes a computer hardware processor to perform:

receiving, from a proxy hardware system, a modified login page;

loading, by a browser system executing on the client system and caused by a routine from the modified login page, an asynchronous engine;

executing, using the asynchronous engine, a login process with an authentication profiling service to retrieve login information for a back-end server;

completing, using the asynchronous engine, the authentication process with the back-end server, wherein

the modified logic page is generated by the proxy hardware system by adding the routine to a login page being sent from the back-end server to the browser.

9. The computer program product of claim 8 , wherein

the asynchronous engine is an AJAX engine.

10. The computer program product of claim 8 , wherein

the authentication profiling service is configured to store, for the user, a user ID and password for the back-end server.

11. The computer program product of claim 8 , wherein

the authentication profiling service is configured to store, for the user, a plurality of user IDs and passwords, respectively, for a plurality of back-end servers.

12. The computer program product of claim 8 , wherein

the asynchronous engine is further configured to update a password of the user on the back-end server responsive to a request by the user.

13. The computer program product of claim 8 , wherein

the authentication process is completed without the proxy hardware system after the routine is added to the login page.

14. A computer-implemented method executed by a client system associated with a user, comprising:

receiving, from a proxy hardware system, a modified login page;

loading, by a browser system executing on the client system and caused by a routine from the modified login page, an asynchronous engine;

executing, using the asynchronous engine, a login process with an authentication profiling service to retrieve login information for a back-end server;

completing, using the asynchronous engine, the authentication process with the back-end server, wherein

the modified logic page is generated by the proxy hardware system by adding the routine to a login page being sent from the back-end server to the browser.

15. The computer-implemented method of claim 14 , wherein

the asynchronous engine is an AJAX engine.

16. The computer-implemented method of claim 14 , wherein

the authentication profiling service is configured to store, for the user, a user ID and password for the back-end server.

17. The computer-implemented method of claim 14 , wherein

the authentication profiling service is configured to store, for the user, a plurality of user IDs and passwords, respectively, for a plurality of back-end servers.

18. The computer-implemented method of claim 14 , wherein

the asynchronous engine is further configured to update a password of the user on the back-end server responsive to a request by the user.

19. The computer-implemented method of claim 14 , wherein

the authentication process is completed without the proxy hardware system after the routine is added to the login page.

20. The computer-implemented method of claim 14 , wherein

the authentication process is a federated single sign-on process.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 8, 2025
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: WORKDAY, INC.
Reel/Frame 073051/0916 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 25, 2016
From: GARGARO, GIANLUCA; RUGGIERO, GAETANO; TRINCHINI, PATRIZIO
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 039246/0606 →