PROVISIONER FOR SINGLE SIGN-ON AND NON-SINGLE SIGN-ON SITES, APPLICATIONS, SYSTEMS, AND SESSIONS

• US 20120204248A1
• Filed: 02/09/2011
• Published: 08/09/2012
• Est. Priority Date: 02/09/2011
• Status: Abandoned Application

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: Manickam, S. A. Vetha, Kavouspour, Dinyar, Gonzalez, Christopher M., Padegal, Ramanjaneyulu, Hicks, James Carleton, Poludasu, Venkata Ramana Murthy
• Application Number:
  US13/023,874
• Publication Number:
  US 20120204248A1
• Time in Patent Office: Days
• US Class Current: 726/8
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A method including receiving an access request to a provisioning system; determining whether to grant access based on receipt of one or more user credentials; determining a level of access to the provisioning system based on user role information, when the one or more user credentials are valid; receiving configuration information by the provisioning system that permits a user to configure an automated sign-on system for single sign-on sites, non-single sign-on sites, mainframe sessions and applications, systems, and user device applications; and configuring the automated sign-on system based on the received configuration information.

Claims

1. A method comprising:

receiving an access request to a provisioning system;

determining whether to grant access based on receipt of one or more user credentials included in the access request;

determining a level of access to the provisioning system based on user role information, when the one or more user credentials are valid;

receiving configuration information by the provisioning system that permits a user to configure an automated sign-on system for single sign-on sites, non-single sign-on sites, mainframe sessions, mainframe applications, systems, and user device applications; and

configuring the automated sign-on system based on the received configuration information.

2. The method of claim 1, further comprising:

providing user interfaces to allow for testing and development of one or more processes pertaining to the automated sign-on system.

3. The method of claim 1, wherein the configuration information includes a network address associated with a non-single sign-on site or a single sign-on site, information pertaining to finding one or more credential fields associated with the non-single sign-on site or the single sign-on site, information pertaining to populating the one or more credential fields associated with the non-single sign-on site or the single sign-on site, and information pertaining to submitting the one or more credentials to the non-single sign-on site or the single sign-on site, and the method further comprising:

configuring an automated sign-on to the non-single sign on site or the single sign-on site based on the configuration information.

4. The method of claim 1, wherein the configuration information includes information pertaining to a type of connection between a user device and a mainframe device, information pertaining to an automation of establishing a connection between the user device and the mainframe device, information pertaining to populating one or more credential fields, information pertaining to a location of a mainframe application, and information pertaining to a launching of the mainframe application, and the method further comprising:

configuring an automated sign-on to a mainframe session or the mainframe application based on the configuration information.

5. The method of claim 1, wherein the configuration information includes information pertaining to a location of a user device application, information pertaining to a type of user credential, information pertaining to populating one or more credential fields, and information pertaining to a launching of the user device application, and the method further comprising:

configuring an automated sign-on to the user device application based on the configuration information.

6. The method of claim 1, wherein the configuration information includes a creation, a modification, or a deletion of a group of users that are assigned a shared user credential pertaining to an automated sign-on process of at least one of a single sign-on site, a non-single sign-on site, a mainframe session, a system, or a user device application.

7. The method of claim 1, wherein the configuration information includes an assignment of at least two of a single sign-on site, a non-single sign-on site, a mainframe session, a system, or a user device application with a user or a group of users, and an assignment of a shared user credential to allow the automated sign-on to the at least two of the single sign-on site, the non-single sign-on site, the mainframe session, the system, or the user device application.

8. The method of claim 1, further comprising:

providing log information that includes information pertaining to users access and use of the single sign-on sites, the non-single sign-on sites, the mainframe sessions and applications, the system, and the user device applications.

9. A network device comprising logic to:

receive an access request that includes one or more user credentials;

determine whether to grant access based on the one or more user credentials;

determine a level of access, when the one or more user credentials are valid, wherein the level of access corresponds to a level of configuration privileges;

receive configuration information that permits a user to configure an automated sign-on for single sign-on sites, non-single sign-on sites, mainframe sessions and mainframe applications, systems, and user device applications; and

configure the automated sign-on based on the received configuration information.

10. The network device of claim 9, wherein the configuration information includes a creation, a modification, or a deletion of a group of users having a shared credential for accessing and using a single sign-on site and at least one of a non-single sign-on site, a mainframe session, a system, or a user device application, and the logic is further configured to:

configure the creation, the modification, or the deletion of the group of users based on the configuration information.

11. The network device of claim 9, comprising logic to:

provide user interfaces to allow for testing and development of one or more processes that provide for an automated sign-on to a single sign-on site, a non-single sign-on site, a mainframe session, a mainframe application, a system, and a user device application.

12. The network device of claim 9, wherein the configuration information includes a network address associated with a non-single sign-on site or a single sign-on site, information pertaining to finding one or more credential fields associated with the non-single sign-on site or the single sign-on site, information pertaining to populating the one or more credential fields associated with the non-single sign-on site or the single sign-on site, and information pertaining to submitting the one or more credentials to the non-single sign-on site or the single sign-on site, and the logic is further configured to:

configure an automated sign-on process to the non-single sign-on site or the single sign-on site based on the configuration information.

13. The network device of claim 9, wherein the configuration information includes information pertaining to a type of connection between a user device and a mainframe device, information pertaining to an automation of establishing a connection between the user device and the mainframe device, information pertaining to populating one or more credential fields, information pertaining to a location of a mainframe application, and information pertaining to a launching of the mainframe application, and the logic is further configured to:

configure an automated sign-on process to the mainframe session or the mainframe application based on the configuration information.

14. The network device of claim 9, wherein the configuration information includes information pertaining to a location of the user device application, information pertaining to a type of user credential, information pertaining to populating one or more credential fields, and information pertaining to a launching of the user device application, and the logic is further configured to:

configure an automated sign-on process to the user device application based on the configuration information.

15. The network device of claim 9, wherein the user device applications include Windows Forms applications, desktop applications, line-of-business applications, and common applications.

16. The network device of claim 9, wherein the network device comprises a web server.

17. One or more computer-readable mediums comprising executable instructions for execution by at least one processing system, the instructions causing the at least one processing system to:

receive an access request that includes one or more user credentials;

determine whether to grant access based on the one or more user credentials;

determine a level of access, when the one or more user credentials are valid, wherein the level of access corresponds to a level of configuration privileges;

receive configuration information that permits a user to configure an automated sign-on for single sign-on sites, non-single sign-on sites, mainframe sessions and applications, and user device applications; and

configure the automated sign-on based on the received configuration information.

18. The one or more computer-readable mediums of claim 17, comprising instructions that further cause the at least one processing system to:

provide user interfaces to allow for testing and development of one or more processes that provide for an automated sign-on to a single sign-on site, a non-single sign-on site, a mainframe session, a mainframe application, a system, and a user device application.

19. The one or more computer-readable mediums of claim 17, wherein the configuration information includes a creation, a modification, or a deletion of a group of users having a shared credential for accessing and using a single sign-on site and at least one of a non-single sign-on site, a mainframe session, a system, or a user device application, and comprising instructions that further cause the at least one processing system to:

configure the creation, the modification, or the deletion of the group of users based on the configuration information.

20. The one or more computer-readable mediums of claim 17, comprising the instructions that further cause the at least one processing system to:

providing log information that includes information pertaining to users access and use of the single sign-on sites, the non-single sign-on sites, the mainframe sessions, the systems, and applications, and the user device applications.