Authorization of multiple user identities

1 . An apparatus including:

an interface for receiving validation requests of a user; and

processing circuitry coupled to the interface, the processing circuitry configured to:

receive a first validation request, the first validation request including a first virtual identity;

provide, over the interface, a primary token responsive to validating the first virtual identity; and

responsive to receiving subsequent validation requests of the user subsequent to the first validation request, provide the primary token upon validating that the subsequent validation requests correspond to the user.

2 . The apparatus of claim 1 , wherein the first virtual identity corresponds to login information of the user within a first application or device.

3 . The apparatus of claim 2 , wherein subsequent validation requests are received from other applications or devices than the first application or device.

4 . The apparatus of claim 1 , wherein the processing circuitry is configured to detect protocol information of the validation requests and to perform validation based on the detected protocol.

5 . The apparatus of claim 4 , wherein the detected protocol includes one of Open Authorization (OAuth) protocol, a Kerberos protocol, or a Security Assertion Markup Language (SAML) protocol.

6 . The apparatus of claim 4 , wherein the processing circuitry is configured to detect whether the primary token is expired and to generate a new primary token responsive to detecting that the primary token is expired.

7 . The apparatus of claim 6 , wherein expiration is determined based on a security level of an application or device associated with the request.

8 . The apparatus of claim 1 , further comprising a storage device, and wherein the processing circuitry is configured to:

store the primary token and an associated first virtual identity; and

store subsequent virtual identities that have been validated to the user such that the first virtual identity and subsequent virtual identities are mapped to the primary token.

9 . The apparatus of claim 1 , wherein the interface is configured to receive validation requests from a plurality of different devices associated with the user.

10 . The apparatus of claim 1 , further comprising:

a user display and a user input device, and wherein the processing circuitry is configured to:

generate a request for the user to select a primary identity by logging into the primary identity;

request user input regarding whether the user has login information for the selected primary identity; and

receive a response to the request for user input, the response including one of a negative response or login credentials for the selected primary identity.

11 . A computer-readable medium including instructions that, when executed on processing circuitry cause the processing circuitry to perform operations including:

receiving a first validation request, the first validation request including a first virtual identity of a user;

providing a primary token responsive to validating the first virtual identity;

responsive to receiving subsequent validation requests of the user subsequent to the first validation request, providing the primary token upon validating that the subsequent validation requests correspond to the user;

storing the primary token and an associated first virtual identity; and

storing subsequent virtual identities that have been validated to the user such that the first virtual identity and subsequent virtual identities are mapped to the primary token.

12 . The computer-readable medium of claim 11 , wherein the first virtual identity corresponds to login information of the user within a first application or device.

13 . The computer-readable medium of claim 12 , wherein subsequent validation requests are received from other applications or devices than the first application or device.

14 . The computer-readable medium of claim 11 , wherein the operations further comprise:

detecting protocol information of the validation requests; and

performing validation based on the detected protocol.

15 . The computer-readable medium of claim 14 , wherein the detected protocol includes one of Open Authorization (OAuth) protocol, a Kerberos protocol, or a Security Assertion Markup Language (SAML) protocol.

16 . The computer-readable medium of claim 14 , wherein the operations further comprise:

detecting whether the primary token is expired and generating a new primary token responsive to detecting that the primary token is expired.

17 . The computer-readable medium of claim 16 , wherein expiration is determined based on a security level of an application or device associated with the request.

18 . The computer-readable medium of claim 11 , wherein the operations further comprise:

storing the primary token and an associated first virtual identity; and

storing subsequent virtual identities that have been validated to the user such that the first virtual identity and subsequent virtual identities are mapped to the primary token.

19 . A method comprising:

receiving a first validation request, the first validation request including a first virtual identity of a user;

detecting a protocol associated with the first validation request;

selecting a validation routine based on the protocol;

providing a primary token responsive to validating the first virtual identity using the validation routine; and

responsive to receiving subsequent validation requests of the user subsequent to the first validation request, providing the primary token upon validating that the subsequent validation requests correspond to the user.

20 . The method of claim 19 , further comprising:

generating a request for the user to select a primary identity by logging into the primary identity;

requesting user input regarding whether the user has login information for the selected primary identity; and

receiving a response to the request for user input, the response including one of a negative response or login credentials for the selected primary identity.