Aggregator technology without usernames and passwords
Techniques are described in which to access a user's web applications, the user registers and signs on to an aggregator system using any supported login identity provider username and password. When the user registers for the first time, the system collects additional information to verify the user for a subsequent access to the system. The system also automatically creates a system secret username and secret, highly securely generated password, both of which are unknown and inaccessible to the user. The secret username and password are stored in an lightweight directory access protocol (LDAP) server or database or in a distributed cloud database system. The system also maps the login identity provider user name to the secret user name and password for subsequent usage.
1. A computer-implemented method, comprising:
receiving, at a computer system based on a user interaction with a user interface of the computer system, a first-time request to login to a third-party application, wherein the user is already logged into the computer system;
responsive to receiving the request to login to the third-party application, the computer system presenting a selectable indicator on the user interface to allow the user to login to the third-party application through a login identity provider, said login identity provider communicably connected to said computer system;
receiving, by the computer system, a selected login identity provider based on user interaction with said selectable indicator;
responsive to receiving said selected login identity provider, said computer system retrieving from a first storage a first user identity associated with said selected login identity provider;
responsive to retrieving the first user identity associated with said selected login identity provider, the computer system matching the first user identity to a private user identity stored in a second storage, wherein the second storage is only accessible by the computer system and wherein the private user identity was previously automatically generated by the computer system when the user initially registered with the computer system;
responsive to matching the first user identity to the private user identity, the computer system automatically generating a second user identity associated with the private user identity, wherein the second user identity is also associated with the third-party application and wherein the second user identity is used by the computer system to allow the user to login to the third party application during subsequent logins without prompting the user to re-enter authentication credentials; and
responsive to generating the second user identity, the computer system allowing the user to create a new account on or login to the third-party application.
2. The method of claim 1 , wherein the computer system and the third-party application are elements of a cloud environment.
3. The method of claim 1 , wherein the login identify provider is a social login identity provider and the computer system comprises a social single sign-on application and the user interface is an interface of the social single sign-on application.
4. The method of claim 1 , wherein the user is already logged into the computer system by using any of: passwords, mobile data, questions and answers, biometric data, and social data.
5. The method of claim 1 , wherein second repository is a distributed directory information service over an Internet Protocol (IP) network.
6. The method of claim 1 , wherein the computer system is configured to invite, based on the user interaction with a user interface the computer system, a second user to share the third-party application from the user after this second user has logged onto the computer system.
7. The method of claim 6 , wherein when the second user is not registered with the computer system, the computer system sending a communication to the second user, said communication allowing said second user to register with the computer system and subsequently causing the shared application to be added to a user interface of the computer system associated with the second user.
8. A system, comprising:
a processor; and
non-transitory computer-readable storage medium coupled to the processor and having instructions stored thereon, which, when executed by the processor, cause the processor to perform operations comprising:
receiving, based on a user interaction with a user interface communicably connected to the processor, a first-time request to login to a third-party application;
responsive to receiving the request to login to the third-party application, presenting a selectable indicator on the user interface to allow the user to login to the third-party application through a login identity provider, said login identity provider communicably connected to said processor;
receiving a selected login identity provider based on user interaction with said selectable indicator;
responsive to receiving said selected login identity provider, retrieving from a first storage a first user identity associated with said selected login identity provider;
responsive to retrieving the first user identity associated with said selected login identity provider, matching the first user identity to a private user identity stored in a second storage, wherein the second storage is only accessible by the processor and wherein the private user identity was previously automatically generated when the user initially was registered;
responsive to matching the first user identity to the private user identity, automatically generating a second user identity associated with the private user identity, wherein the second user identity is also associated with the third-party application and wherein the second user identity is used to allow the user to login to the third-party application during subsequent logins without prompting the user to re-enter authentication credentials; and
responsive to generating the second user identity, allowing the user to create a new account on or login to the third-party application.
9. The system of claim 8 , wherein the third-party application is an element in a cloud environment.
10. The system of claim 8 , wherein the login identify provider is a social login identity provider and the user interface is an interface of the social single sign-on application.
11. The system of claim 8 , wherein the processor is configured to allow the user to login using any of: passwords, mobile data, questions and answers, biometric data, and social data.
12. The system of claim 8 , wherein second repository is a distributed directory information service over an Internet Protocol (IP) network.
13. The system of claim 8 , wherein the processor is configured to invite, based on the user interaction with a user interface, a second user to share the third-party application from the user when the second user is a registered member.
14. The system of claim 13 , wherein when the second user is not registered with the computer system, sending a communication to the second user, said communication allowing said second user to register with the computer system and subsequently causing the shared application to be added to a user interface associated with the second user.