System and method for single-sign-on access to a resource via a portal server

• US 20050015490A1
• Filed: 07/16/2003
• Published: 01/20/2005
• Est. Priority Date: 07/16/2003
• Status: Abandoned Application

• Current Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Saare, John E., Mueller, Thomas R.
• Application Number:
  US10/621,853
• Publication Number:
  US 20050015490A1
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A single-sign-on adapter (SSO Adapter) implementing one or more authentication mechanisms that may be used by Portal middleware on behalf of a portal user. A user seeking access to a resource server through a portal server performs a single sign-on with the portal server at the beginning of a session. When requests a resource from resource server that requires authentication, the authentication is handled by the portal server without requiring an authentication response from the user. The portal server may use stored user credentials, a token-based shared authentication service, or proxy authentication in order to gain access to the resource server on behalf of the portal user.

Claims

1. A method for providing a portal user access to a resource server via a portal server, comprising:

said portal user performing a single-sign-on to access said portal server;

said portal user requesting a resource from said resource server via said portal server;

said portal server performing a sign-on to access said resource server on behalf of said portal user; and

said resource server returning said resource to said portal user via said portal server.

2. The method of claim 1, wherein said performing a sign-on to access said resource server comprises a using stored credentials.

3. The method of claim 1, wherein said performing a sign-on to access said resource server comprises using a shared authentication service.

4. The method of claim 1, wherein said performing a sign-on to access said resource server comprises using proxy authentication.

5. The method of claim 1, wherein said resource server is an electronic mail server.

6. The method of claim 1, wherein said resource server is an instant messaging server.

7. The method of claim 1, wherein said resource server is an addressbook server.

8. The method of claim 1, wherein said resource server is a calendar server.

9. A system for providing a portal user access to a resource server via a portal server using a single-sign-on, said system comprising

a first sign-on mechanism associated with said portal server for allowing said portal user access to said portal server;

a second sign-on mechanism associated with said portal server for allowing said portal server access to said resource server; and

wherein said first sign-on mechanism is executed only once during a user session, and wherein said second sign-on mechanism is executed one or more times.

10. The system of claim 9, wherein said second sign-on mechanism comprises stored credential sign-on.

11. The system of claim 9, wherein said second sign-on mechanism comprises a shared authentication service.

12. The system of claim 9, wherein said second sign-on mechanism comprises a proxy authentication service.

13. The system of claim 9, wherein said resource server is an electronic mail server.

14. The system of claim 9, wherein said resource server is an instant messaging server.

15. The system of claim 9, wherein said resource server is an addressbook server.

16. The system of claim 9, wherein said resource server is a calendar server.

17. A computer readable medium containing executable instructions which, when executed in a system comprising a portal server coupled to a resource server, causes the system to provide a resource to a portal, comprising:

performing a first sign-on on behalf of said portal user with said portal server using a single-sign-on;

receiving a request for said resource from said portal user;

performing a second sign-on by said portal server to access said resource server on behalf of said portal user; and

returning said resource to said portal user via said portal server.

18. The computer readable medium of claim 17, wherein said performing a second sign-on to access said resource server comprises using stored credentials.

19. The computer readable medium of claim 17, wherein said performing a second sign-on to access said resource server comprises using a shared authentication service.

20. The computer readable medium of claim 17, wherein said performing a second sign-on to access said resource server comprises using proxy authentication.