IP Library › Granted Patent US 9,961,059
Granted Patent B2
US 9,961,059 · App. 14/632,594 · Granted May 1, 2018

Authenticator plugin interface

Inventors: Barak Azulay (Nes-Ziona, IL); Alon Bar-Lev (Raanana, IL); Ravi Nori (Raanana, IL)
Assignee: RED HAT ISRAEL, LTD.
H04L63/08G06F21/31
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,961,059
App. No.
14/632,594
Granted
May 1, 2018
Kind
B2
Abstract

Authenticator plugin interface for an enterprise virtualization portal is provided. An example method for evaluating a portal access request may comprise: receiving, by a virtualization management platform, a request initiated by a requestor for access to an enterprise virtualization portal associated with the virtualization management platform, the request comprising a login credential; transmitting, to a first external authentication system, a first authentication query comprising an identifier of a first data type, and a first value of the first data type, wherein the first value is derived from the login credential; receiving a first response message comprising an identifier of a second data type, and an authentication response of the second data type; and responsive to evaluating the authentication response, granting the requestor access to the enterprise virtualization portal.

Claims (42)

1. A method, comprising:

receiving, by a processing device of a virtualization management platform, a request initiated by a requestor for access to an enterprise virtualization portal associated with the virtualization management platform, the request comprising a login credential and a requested type of portal access;

transmitting, by the processing device, to a first authentication system, a first authentication query comprising a first value derived from the login credential and a second value derived from the type of portal access;

receiving, from the first authentication system, a first authentication response;

transmitting a second authentication query to a second authentication system in response to determining that the first response message indicates a successful user authentication, wherein the second authentication query comprises a third value derived from the login credential and a fourth value derived from the type of portal access, wherein the first authentication system and the second authentication system implement at least one of: OpenID authentication, Keystone authentication, Lightweight Directory Access Protocol (LDAP) authentication, or a custom authentication;

receiving, from the second authentication system, a second authentication response;

performing a run-time binding between the virtualization management platform and at least one of: the first authentication system or the second authentication system; and

responsive granting the requestor access to the enterprise virtualization portal of the requested type in response to evaluating the second authentication response, wherein the first value, the second value, the third value and the fourth value are numeric values, alphanumeric values, or string values.

2. The method of claim 1 , further comprising:

configuring the enterprise virtualization portal for performing chain authentication by the first authentication system and the second authentication system.

3. The method of claim 1 , wherein the first authentication system and the second authentication system implement different authentication methods.

4. The method of claim 1 , wherein the requested type of portal access is represented by one of: an administrator portal access or a user portal access.

5. The method of claim 1 , further comprising:

responsive to determining that the first response message indicates a unsuccessful user authentication, denying the requestor access to the enterprise virtualization portal.

6. A system comprising: a memory; and

a processing device, operatively coupled to the memory, to:

receive a request initiated by a requestor for access to an enterprise virtualization portal, the request comprising a login credential and a requested type of portal access;

transmit, to a first authentication system, a first authentication query comprising a first value derived from the login credential and a second value derived from the type of portal access;

receive, from the first authentication system a first authentication response;

transmit a second authentication query to a second authentication system in response to determining that the first response message indicates a successful user authentication, wherein the second authentication query comprises a third value derived from the login credential and a fourth value derived from the type of portal access, wherein the first authentication system and the second authentication system implement at least one of: OpenID authentication, Keystone authentication, Lightweight Directory Access Protocol (LDAP) authentication, or a custom authentication;

receive, from the second authentication system, a second authentication response;

perform a run-time binding between the virtualization management platform and at least one of: the first authentication system or the second authentication system; and

responsive to evaluating the second authentication response, grant the requestor access to the enterprise virtualization portal of the requested type wherein the first value, the second value, the third value and the fourth value are numeric values, alphanumeric values, or string values.

7. The system of claim 6 , wherein the processing device is further to:

configure the enterprise virtualization portal for performing chain authentication by the first authentication system and the second authentication system.

8. The system of claim 6 , wherein the first authentication system and the second authentication system implement different authentication methods.

9. The system of claim 6 , wherein the requested type of portal access is represented by one of: an administrator portal access or a user portal access.

10. The system of claim 6 , wherein the processing device is further to:

responsive to determining that the first response message indicates a unsuccessful user authentication, deny the requestor access to the enterprise virtualization portal.

11. A computer-readable non-transitory storage medium comprising executable instructions that, when executed by a processing device, cause the processing device to:

receive, by the processing device, a request initiated by a requestor for access to an enterprise virtualization portal associated with the virtualization management platform, the request comprising a login credential and a requested type of portal access;

transmit, to a first authentication system, a first authentication query comprising a first the first value derived from the login credential and a second value derived from the type of portal access;

receive, from the first authentication system a first authentication response;

transmit a second authentication query to a second authentication system in response to determining that the first response message indicates a successful user authentication, wherein the second authentication query comprises a third value derived from the login credential and a fourth value derived from the type of portal access, wherein the first authentication system and the second authentication system implement at least one of: OpenID authentication, Keystone authentication, Lightweight Directory Access Protocol (LDAP) authentication, or a custom authentication;

receive, from the second authentication system, a second authentication response;

perform a run-time binding between the virtualization management platform and at least one of: the first authentication system or the second authentication system;

and

grant the requestor access to the enterprise virtualization portal of the requested type in response to evaluating the second authentication response, wherein the first value, the second value, the third value and the fourth value are numeric values, alphanumeric values, or string values.

12. The computer-readable non-transitory storage medium of claim 11 , further comprising executable instructions causing the processing device to:

configure the enterprise virtualization portal for performing chain authentication by the first authentication system and the second authentication system.

13. The computer-readable non-transitory storage medium of claim 11 , wherein the first authentication system and the second authentication system implement different authentication methods.

14. The computer-readable non-transitory storage medium of claim 11 , wherein the requested type of portal access is represented by one of: an administrator portal access or a user portal access.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 21, 2015
From: AZULAY, BARAK; BAR-LEV, ALON; NORI, RAVI
To: RED HAT ISRAEL, LTD.
Reel/Frame 036388/0447 →
Continuity (2)
Provisional Application 62022921 · Jul 10, 2014
Related Publication 20160014196A1 · Jan 14, 2016