Indirect user authentication
As disclosed herein a computer system, executed by a computer, includes receiving, from a user, a request for access to a shared system, wherein the request comprises a user identifier and a user password corresponding to the user, and determining privileges corresponding to the shared system using the user identifier. The computer system further includes requesting, from an identity manager, a shared identifier and a shared password corresponding to the shared system, receiving, from the identity manager, the shared identifier and the shared password, and using the shared identifier and the shared password to enable the user to use the shared system.
1. A computer system comprising:
one or more computer processors;
one or more computer readable storage media;
program instructions stored on the computer readable storage media for execution by at least one of the computer processors, the program instructions comprising instructions for:
receiving, from one or more users, a request for access to a shared system, wherein the request comprises a shared system identifier that indicates the shared system for which access is being requested, a shared user identifier, and a user identifier and a user password corresponding to the one or more users;
determining if the one or more users are authorized to access the shared system by confirming the user identifier of each of the one or more users includes at least the same level of authorization as the shared user identifier and one or more of:
confirming the one or more users are included in an authorized user list, and
confirming the one or more users are a member of an authorized user group;
responsive to determining that the one or more users are authorized to access the shared system, requesting, from an identity manager, the shared user identifier and a shared password corresponding to the shared system;
receiving, from the identity manager, the shared user identifier and the shared password, and providing the shared user identifier to each of the one or more users, and automatically authenticating each of the one or more users on the shared system using the shared user identifier and the shared password;
using the shared user identifier and the shared password of each of the one or more users to enable the one or more users to use the shared system, wherein the shared password is not provided to the any of the one or more users; and
retaining details corresponding to the request for access to the shared system by the one or more users in one or more logs, analyzing the one or more logs to determine that a particular user of the shared system is accessing the shared system without following a required protocol to gain access, prohibiting access to the shared system by the particular user by terminating an active session of the particular user, and sending an alert to a security administrator, wherein the alert comprises one or more of login time of the particular user, connection client information corresponding to the particular user, and activity of the particular user.