Invention Grant
- Patent Title: Multi-domain applications with authorization and authentication in cloud environment
-
Application No.: US15169841Application Date: 2016-06-01
-
Publication No.: US10015157B2Publication Date: 2018-07-03
- Inventor: Jasen Minov , Milen Manov , Stefan Petrov
- Applicant: SAP SE
- Applicant Address: DE Walldorf
- Assignee: SAP SE
- Current Assignee: SAP SE
- Current Assignee Address: DE Walldorf
- Agency: Buckley, Maschoff & Talwalkar LLC
- Main IPC: H04L29/06
- IPC: H04L29/06

Abstract:
A multi-domain application requiring SSO and SLO operations in cloud environment is presented. The computing system of the multi-domain application includes a multi-domain service (MDS) to redirect the calls for the multi-domain application to an identity provider to authenticate the user or to invoke the single logout services (SLOs) on the domains of the multi-domain application and to invalidate the user sessions on the domains. A cookie that includes the multi-domain application URL is generated to reach the assertion consumer service (ASC) and the single logout service (SLO) that receive an identity assertion response from the identity provider. Domain specific SLOs are provided. A trust between these domain specific SLOs and the SLO is provided based on service provider keys. The SAML mechanism for a logout scenario is reused for communication between the SLO and the domain specific SLOs, where the SLO plays a role of a local IDP.
Public/Granted literature
- US20160277390A1 MULTI-DOMAIN APPLICATIONS WITH AUTHORIZATION AND AUTHENTICATION IN CLOUD ENVIRONMENT Public/Granted day:2016-09-22
Information query