IP Library Granted Patent US 11,722,476
Granted Patent B2
US 11,722,476 · App. 17/452,121 · Granted Aug 8, 2023

Workflow service back end integration

Inventors: Daniel E. Zeck (Roswell, GA); David Shaw (Buford, GA); Robert Worsnop (Dunwoody, GA); John Ryan Bard (Smyrna, GA)
Assignee: VMWARE, INC.
H04L63/0815G06F3/0482G06F3/04817H04L63/166H04L67/34H04L67/51
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,722,476
App. No.
17/452,121
Granted
Aug 8, 2023
Kind
B2
Abstract

Disclosed are various approaches for workflow service back end integration. In some examples, a hosting location is identified for a connector that handles communications with a network service. Authentication information that is selected based on the hosting location of the connector is appended to a service request. The authentication information includes a service credential that the connector uses to authenticate with the network service, if the connector is hosted locally to the workflow service. The authentication information includes instructions for the connector to retrieve the service credential from an enterprise-hosted data store, if the connector is hosted external to the workflow service. The service request is then transmitted with the selected authentication information.

Claims (44)

1. A non-transitory computer-readable medium comprising machine-readable instructions, wherein the instructions, when executed by at least one processor, cause a computing device to at least:

identify, by the workflow service, a hosting location of a connector that handles communications with a network service;

append to a service request, by the workflow service, selected authentication information that is selected based on determining whether the hosting location of the connector is local to or external relative to the workflow service, according to rules that permit service credentials to be transmitted to connectors local to the workflow service and prevent service credentials from being transmitted over public networks to connectors external to the workflow service, wherein the authentication information is selected from a group comprising:

a service credential that the connector uses to authenticate with the network service, which is selected in an instance in which the hosting location indicates that the connector is hosted locally in the computing environment of the workflow service, and

instructions for the connector to retrieve the service credential from an enterprise-hosted data store, which is selected in an instance in which the hosting location indicates that the connector is hosted external to the computing environment of the workflow service; and

transmit, by the workflow service to the connector, the service request comprising the selected authentication information.

2. The non-transitory computer-readable medium of claim 1 , wherein the connector and the enterprise-hosted data store are hosted together within a trusted network.

3. The non-transitory computer-readable medium of claim 1 , wherein the instructions for the connector to retrieve the service credential comprise a network address for the server.

4. The non-transitory computer-readable medium of claim 1 , wherein the hosting location of the connector is determined based on a network address of the connector.

5. The non-transitory computer-readable medium of claim 1 , wherein the instructions, when executed by the at least one processor, cause the computing device to at least:

identify authentication data that specifies that the service credential for the network service is prohibited from being transmitted over public networks, wherein the selected authentication information prevents the service credential from being transmitted over a public network.

6. The non-transitory computer-readable medium of claim 1 , wherein the service credential comprises a multi-user credential that is utilized by multiple user accounts.

7. The non-transitory computer-readable medium of claim 1 , wherein the instructions, when executed by the at least one processor, cause the computing device to at least:

receive, from the connector, data retrieved from the network service; and

transmit, to a client device associated with the service request, the data retrieved from the network service.

8. A system, comprising:

at least one computing device comprising at least one processor; and

at least one memory comprising machine-readable instructions, wherein the machine-readable instructions, when executed by the at least one processor, cause the at least one computing device to at least:

identify, by the workflow service, a hosting location of a connector that handles communications with a network service;

append to a service request, by the workflow service, selected authentication information that is selected based on determining whether the hosting location of the connector is local to or external relative to the workflow service, and according to rules that permit service credentials to be transmitted to connectors local to the workflow service and prevent service credentials from being transmitted over public networks to connectors external to the workflow service, wherein the authentication information is selected from a group comprising:

a service credential that the connector uses to authenticate with the network service, which is selected in an instance in which the hosting location indicates that the connector is hosted locally in the computing environment of the workflow service, and

instructions for the connector to retrieve the service credential from an enterprise-hosted data store, which is selected in an instance in which the hosting location indicates that the connector is hosted external to the computing environment of the workflow service; and

transmit, by the workflow service to the connector, the service request comprising the selected authentication information.

9. The system of claim 8 , wherein the connector and the enterprise-hosted data store are hosted together within a trusted network.

10. The system of claim 8 , wherein the instructions for the connector to retrieve the service credential comprise a network address for the server.

11. The system of claim 8 , wherein the hosting location of the connector is determined based on a network address of the connector.

12. The system of claim 8 , wherein the instructions, when executed by the at least one processor, cause the computing device to at least:

identify authentication data that specifies that the service credential for the network service is prohibited from being transmitted over public networks, wherein the authentication information prevents the service credential from being transmitted over a public network.

13. The system of claim 8 , wherein the service credential comprises a multi-user credential that is utilized by multiple user accounts.

14. The system of claim 8 , wherein the instructions, when executed by the at least one processor, cause the computing device to at least:

receive, from the connector, data retrieved from the network service; and

transmit, to a client device associated with the service request, the data retrieved from the network service.

15. A method, comprising:

identifying, by the workflow service, a hosting location of a connector that handles communications with a network service;

appending to a service request, by the workflow service, append to a service request, by the workflow service, selected authentication information that is selected based on determining whether the hosting location of the connector is local to or external relative to the workflow service, and according to rules that permit service credentials to be transmitted to connectors local to the workflow service and prevent service credentials from being transmitted over public networks to connectors external to the workflow service, wherein the authentication information is selected from a group comprising:

a service credential that the connector uses to authenticate with the network service, which is selected in an instance in which the hosting location indicates that the connector is hosted locally in the computing environment of the workflow service, and

instructions for the connector to retrieve the service credential from an enterprise-hosted data store, which is selected in an instance in which the hosting location indicates that the connector is hosted external to the computing environment of the workflow service; and

transmitting, by the workflow service to the connector, the service request comprising the authentication information.

16. The method of claim 15 , wherein the connector and the enterprise-hosted data store are hosted together within a trusted network.

17. The method of claim 15 , wherein the instructions for the connector to retrieve the service credential comprise a network address for the server.

18. The method of claim 15 , wherein the hosting location of the connector is determined based on a network address of the connector.

19. The method of claim 15 , wherein the instructions, when executed by the at least one processor, cause the computing device to at least:

identify authentication data that specifies that the service credential for the network service is prohibited from being transmitted over public networks, wherein the authentication information prevents the service credential from being transmitted over a public network.

20. The method of claim 15 , wherein the service credential comprises a multi-user credential that is utilized by multiple user accounts.

Assignments (3)
PATENT ASSIGNMENT Recorded Aug 5, 2024
From: VMWARE LLC
To: OMNISSA, LLC
Reel/Frame 068327/0365 →
SECURITY INTEREST Recorded Jul 3, 2024
From: OMNISSA, LLC
To: UBS AG, STAMFORD BRANCH
Reel/Frame 068118/0004 →
CHANGE OF NAME Recorded Apr 15, 2024
From: VMWARE, INC.
To: VMWARE LLC
Reel/Frame 067102/0395 →