IP Library › Granted Patent US 12,143,377
Granted Patent B2
US 12,143,377 · App. 18/525,397 · Granted Nov 12, 2024

Application single sign-on determinations based on intelligent traces

Inventors: Jeevan Suresh Desarda (Bothell, WA); Mayukh Ray (Sammamish, WA)
Assignee: MICROSOFT TECHNOLOGY LICENSING, LLC
H04L63/0815H04L63/0428H04L63/083H04L63/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,143,377
App. No.
18/525,397
Granted
Nov 12, 2024
Kind
B2
Abstract

According to examples, an apparatus may include a processor that may determine that an application was accessed through a portal. Based on a determination that the application was accessed through the portal, the processor may determine whether a first credential type or a second credential type was supplied to access the application, in which the first credential type may include a set of personal credentials of a user and the second credential type may include a set of single sign-on credentials that the user may use to access multiple applications. The processor may also output a trace that may indicate an identification of the application that was accessed and the type of the credential supplied to access the application, in which a backed entity may analyze the data included in the trace.

Claims (59)

1. A computing device comprising:

a processor; and

a memory on which is stored machine-readable instructions that when executed by the processor, cause the processor to:

receive a plurality of traces from a plurality of apparatuses, the received plurality of traces indicating:

an application accessed on an apparatus; and

whether a first credential type or a second credential type was used to access the application;

determine a number of times that a certain application was accessed using the first credential type; and

based on a determination that the determined number of times exceeds a predefined number, enable access to the certain application through entry by users of the second credential type.

2. The computing device of claim 1 , wherein the first credential type comprises a set of personal credentials of a user and the second credential type comprises a set of single sign-on credentials that the user uses to access multiple applications.

3. The computing device of claim 1 , wherein the instructions further cause the processor to:

maintain a list of applications that users of the apparatuses are enabled to access through entry of the second credential type; and

add the certain application into the list of applications.

4. The computing device of claim 1 , wherein the received plurality of traces include traces corresponding to a set of predefined applications, and wherein the instructions further cause the processor to:

output an update to the set of predefined applications to the plurality of apparatuses based on the set of predefined applications being updated.

5. The computing device of claim 1 , wherein the instructions further cause the processor to:

determine that a certain website is to be accessed through entry of the second credential type;

determine that access to the certain website failed; and

analyze the received plurality of traces to identify a root cause of a failure in access to the certain website.

6. The computing device of claim 1 , wherein the plurality of traces includes traces from which personally identifiable information of a user is omitted or obfuscated.

7. The computing device of claim 1 , wherein the instructions further cause the processor to:

analyze the received plurality of traces to identify the number of times each of the applications identified in the traces were accessed through use of the first credential type.

8. The computing device of claim 1 , wherein the instructions further cause the processor to:

enable users to enter their single sign-on credentials to access the certain application based on the certain application being accessed at least the predefined number of times.

9. A method comprising:

receiving, by a processor, a plurality of traces from a plurality of apparatuses, wherein the received plurality of traces indicate:

an application accessed on an apparatus; and

whether a first credential type or a second credential type was used to access the application;

determining, by the processor, a number of times that a certain application was accessed using the first credential type; and

enabling, by the processor, access to the certain application through entry by users of the second credential type based on a determination that the determined number of times exceeds a predefined number.

10. The method of claim 9 , wherein the first credential type comprises a set of personal credentials of a user and the second credential type comprises a set of single sign-on credentials that the user uses to access multiple applications.

11. The method of claim 9 , further comprising:

maintaining a list of applications that users of the apparatuses are enabled to access through entry of the second credential type; and

adding the certain application into the list of applications.

12. The method of claim 9 , wherein the received plurality of traces include traces corresponding to a set of predefined applications, and wherein the method further comprises:

outputting an update to the set of predefined applications to the plurality of apparatuses based on the set of predefined applications being updated.

13. The method of claim 9 , further comprising:

determining that a certain website is to be accessed through entry of the second credential type;

determining that access to the certain website failed; and

analyzing the received plurality of traces to identify a root cause of a failure in access to the certain website.

14. The method of claim 9 , further comprising:

analyzing the received plurality of traces to identify the number of times each of the applications identified in the traces were accessed through use of the first credential type.

15. The method of claim 9 , further comprising:

enabling users to enter their single sign-on credentials to access the certain application based on the certain application being accessed at least the predefined number of times.

16. The method of claim 9 , wherein the plurality of traces includes traces from which personally identifiable information of a user is omitted or obfuscated.

17. A computer-readable medium on which is stored computer-readable instructions that when executed by a processor, cause the processor to:

receive a plurality of traces from a plurality of apparatuses, wherein the received plurality of traces indicate:

an application accessed on an apparatus; and

whether a first credential type or a second credential type was used to access the application, the first credential type comprising a set of personal credentials of a user and the second credential type comprising a set of single sign-on credentials that the user uses to access multiple applications;

determining, by the processor, a number of times that a certain application was accessed using the first credential type; and

enabling, by the processor, access to the certain application through entry by users of the second credential type based on a determination that the determined number of times exceeds a predefined number.

18. The computer-readable medium of claim 17 , wherein the instructions further cause the processor to:

maintain a list of applications that users of the apparatuses are enabled to access through entry of the second credential type; and

add the certain application into the list of applications.

19. The computer-readable medium of claim 17 , wherein each of the received plurality of traces includes a trace corresponding to a set of predefined applications, and wherein the instructions further cause the processor to:

output an update to the set of predefined applications to the plurality of apparatuses based on the set of predefined applications being updated.

20. The computer-readable medium of claim 17 , wherein the instructions further cause the processor to:

determine that a certain website is to be accessed through entry of the second credential type;

determine that access to the certain website failed; and

analyze the received plurality of traces to identify a root cause of a failure in access to the certain website.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 9, 2024
From: DESARDA, JEEVAN SURESH; RAY, MAYUKH
To: MICROSOFT TECHNOLOGY LICENSING, LLC
Reel/Frame 066422/0524 →
Continuity (2)
Division 17317525 · May 11, 2021
Related Publication 20240154948A1 · May 9, 2024