Toggle between accounts
View Patent ↗Techniques are described for enabling administrators of teams that use a particular service to specify which sign-on options, of multiple possible sign-on options, are assigned to the members of the teams to which the administrators belong. For example, an administrator may assign a first sign-on option, which only allows users to use native authentication, to one set of members of the team. At the same time, the administrator may assign a second sign-on option, which only allows users to use third-party single-sign-on authentication, to another set of members of the same team.
1. A method comprising:
providing, by a service, a first mechanism by which users of the service may sign on to the service using a native authentication of the service;
providing, by the service, a second mechanism by which users of the service may sign on to the service using a third-party single-sign-on provider;
storing, at the service, data that identifies a plurality of teams;
storing, at the service, data that identifies at least one administrator of each of the plurality of teams;
enabling an administrator of each team of the plurality of teams to access and use a tool to specify which sign-on options, of a plurality of sign-on options made available by the service, are assigned to member roles associated with the team to which the administrator belongs;
wherein the plurality of sign-on options include at least:
a first sign-on option in which only the first mechanism may be used, and
a second sign-on option in which only the second mechanism may be used; and
wherein the method is performed by one or more computing devices.
2. The method of claim 1 , further comprising:
enabling a particular administrator of each particular team of the plurality of teams to access and use the tool to specify which sign-on options, of the plurality of sign-on options made available by the service, are assigned to member users associated with a particular team to which the particular administrator belongs.
3. The method of claim 1 , further comprising:
receiving a request for service from a particular user;
locating a profile associated with a user-id of the particular user;
determining a particular sign-on option, of the plurality of sign-on options, assigned to the particular user; and
providing the requested service based, at least in part, on a successful authentication of the particular user.
4. The method of claim 3 , further comprising:
asking the particular user to provide the user-id.
5. The method of claim 4 , wherein the user-id of the particular user is not received in the request for service from the particular user.
6. The method of claim 3 , wherein the determining the particular sign-on option assigned to the particular user is based, at least in part, on determining a particular member role associated with the particular user; and determining that the particular sign-on option is assigned to the particular member role.
7. The method of claim 3 , wherein:
the particular sign-on option is the first sign-on option; and
the method further comprises asking the particular user for a password.
8. The method of claim 3 , wherein:
the particular sign-on option is the second sign-on option; and
the particular user signs on to the service using the third-party single-sign-on provider.
9. The method of claim 3 , wherein:
the plurality of sign-on options further include a third sign-on option in which either the first sign-on option or the second sign-on option may be used;
the particular sign-on option is the third sign-on option;
the method further comprises receiving a specification from the particular user which of the first sign-on option or the second sign-on option to use to sign on to the service; and
the particular user signs on to the service using native authentication of the service or using the third-party single-sign-on provider.
10. The method of claim 3 , wherein:
the plurality of sign-on options further include a third sign-on option in which either the first sign-on option or the second sign-on option may be used;
the particular sign-on option is the third sign-on option; and
the method further comprises determining to use the third-party single-sign-on provider to sign on the particular user to the service based, at least in part, on the particular user submitting a native authentication sign-on page without specifying a password.
11. The method of claim 1 , wherein the plurality of sign-on options further include a third sign-on option in which both the first sign-on option and the second sign-on option may be used.
12. The method of claim 1 , further comprising:
receiving, through said tool, an input that assigns the first sign-on option to a first member role associated with the team; and
receiving, through said tool, an input that assigns the second sign-on option to a second member role associated with the team while the first member role continues to be assigned to the first sign-on option.
13. One or more non-transitory computer-readable storage media storing instructions which, when executed by one or more computing devices, cause performance of a method comprising the steps of:
providing, by a service, a first mechanism by which users of the service may sign on to the service using a native authentication of the service;
providing, by the service, a second mechanism by which users of the service may sign on to the service using a third-party single-sign-on provider;
storing, at the service, data that identifies a plurality of teams;
storing, at the service, data that identifies at least one administrator of each of the plurality of teams;
enabling an administrator of each team of the plurality of teams to access and use a tool to specify which sign-on options, of a plurality of sign-on options made available by the service, are assigned to member roles associated with the team to which the administrator belongs;
wherein the plurality of sign-on options include at least:
a first sign-on option in which only the first mechanism may be used, and
a second sign-on option in which only the second mechanism may be used;
receiving a request for service from a particular user;
determining a particular sign-on option, of the plurality of sign-on options, assigned to the particular user;
taking a corrective action based, at least in part, on an unsuccessful authentication of the particular user via the first mechanism or the second mechanism.
14. The one or more non-transitory computer-readable storage media of claim 13 , wherein the corrective action comprises prompting the particular user to attempt again to sign on to the service.
15. The one or more non-transitory computer-readable storage media of claim 13 , wherein the corrective action comprises notifying a particular administrator of a particular team, of the plurality of teams, of which the particular user is a member, of the unsuccessfully authentication.
16. A computer system comprising:
one or more processors;
one or more storage media storing one or more computer programs for execution by the
one or more processors, the one or more computer programs comprising instructions for:
providing, by a service, a first mechanism by which users of the service may sign on to the service using a native authentication of the service;
providing, by the service, a second mechanism by which users of the service may sign on to the service using a third-party single-sign-on provider;
storing, at the service, data that identifies a plurality of teams;
storing, at the service, data that identifies at least one administrator of each of the plurality of teams;
enabling an administrator of each team of the plurality of teams to access and use a tool to specify which sign-on options, of a plurality of sign-on options made available by the service, are assigned to member roles associated with the team to which the administrator belongs;
wherein the plurality of sign-on options include at least:
a first sign-on option in which only the first mechanism may be used, and
a second sign-on option in which only the second mechanism may be used.
17. The system of claim 16 , the one or more programs further comprising instructions for:
receiving a request for service from a particular user;
determining a particular sign-on option, of the plurality of sign-on options, assigned to the particular user; and
providing the requested service based, at least in part, on a successful authentication of the particular user via the first mechanism or the second mechanism.
18. The system of claim 17 , wherein:
the plurality of sign-on options further include a third sign-on option in which either the first sign-on option or the second sign-on option may be used;
the particular sign-on option is the third sign-on option; and
the one or more programs further comprising instructions for determining to use the third-party single-sign-on provider to sign on the particular user to the service based, at least in part, on the particular user submitting a native authentication sign-on page without specifying a password.
19. The system of claim 16 , wherein the plurality of sign-on options further include a third sign-on option in which both the first sign-on option and the second sign-on option may be used.
20. The system of claim 16 , the one or more programs further comprising instructions for:
receiving, through said tool, an input that assigns the first sign-on option to a first member role associated with the team; and
receiving, through said tool, an input that assigns the second sign-on option to a second member role associated with the team while the first member role continues to be assigned to the first sign-on option.
21. The method of claim 3 , further comprising taking a corrective action based, at least in part, on an unsuccessful authentication of the particular user via the first mechanism or the second mechanism.
22. The method of claim 21 , wherein the corrective action comprises prompting the particular user to attempt again to sign on to the service.
23. The method of claim 21 , wherein the corrective action comprises notifying a particular administrator of a particular team, of the plurality of teams, of which the particular user is a member, of the unsuccessfully authentication.