Method and system for single sign on using configuration directives with respect to target types

• US 6,275,944 B1
• Filed: 04/30/1998
• Issued: 08/14/2001
• Est. Priority Date: 04/30/1998
• Status: Expired due to Term

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Milman, Ivan Matthew, Kao, I-Lung
• Primary Examiner(s): Lee, Thomas
• Assistant Examiner(s): MAI, RIJUE
• Application Number:
  US09/070,511
• Time in Patent Office: 1,202 Days
• Field of Search: 713/200, 713/201, 713/202, 709/225, 709/226, 709/200, 709/223, 709/302, 709/202, 709/227, 709/229
• US Class Current: 726/36
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers

Abstract

A single sign-on (SSO) mechanism to enable a given user to access a target application on a target resource in a distributed computer enterprise. One or more configuration directives each identifying a given logon process and any associated methods required to access the target application on the target resource are stored in a locally accessible database (CIM). For each of a set of users, a globally-accessible database (PKM) stores user-specific and application-specific information enabling the user to access and logon to one or more target resources. During a particular session, a logon coordinator (LC) mechanism coordinates given user information with the configuration directive to enable the given user to perform a given action with respect to the target application without specifying the given logon process and the application-specific information.

Claims

1. A method of single sign-on to multiple target resources in a computer enterprise environment, wherein at least some target resources normally require a given logon process to access the target resource, comprising the steps of:

for each of a set of target resources having different respective logon processes, storing configuration directives each of which include a target type and information identifying the given logon process and methods required to access the target resource;

during a logon attempt by a given user with respect to one of the set of target resources, determining whether any of the configuration directives include a given target type; and

if any of the configuration directives include the given target type, using information in the configuration directive to access the target resource.

2. The method as described in claim 1 wherein the configuration directives are stored in a database at a client machine from which the logon attempt is initiated.

3. The method as described in claim 1 wherein the at least one configuration directive is generated from a user-specified logon preference.

4. The method as described in claim 1 further including the step of modifying at least one configuration directive in the database.

5. The method as described in claim 1 wherein during the logon attempt, given user information is coordinated with the configuration directives.

6. The method as described in claim 5 wherein the given user information is user-specific and application-specific information that enables a given user to access and logon to one or more target resources.

7. The method as described in claim 6 wherein the given user information is stored in a globally-accessible database.

8. The method as described in claim 1 wherein the configuration directive is defined by a template file.

9. A system for enabling access to a target application on a target resource in a distributed computer enterprise, comprising:

a database for storing configuration directives each of which include a target type and information identifying a given logon process and any associated methods required to access a target application on a target resource;

means operative during a logon attempt for determining whether any of the configuration directives include a given target type; and

means responsive to the determining means for using information in a given configuration directive to access the target resource.

10. The system as described in claim 9 wherein the storing means is a database located at a client machine from which the logon attempt is initiated.

11. The system as described in claim 9 wherein at least one configuration directive is generated from a user-specified logon preference.

12. The system as described in claim 9 further including means operative during the logon attempt for coordinating given user information with the configuration directives.

13. The system as described in claim 12 wherein the given user information is user-specific and application-specific information that enables a given user to access and logon to one or more target resources.

14. The system as described in claim 12 wherein the given user information is stored in a globally-accessible database.

15. The system as described in claim 9 wherein the configuration directive is defined by a template file.

16. A computer program product in computer-readable media operable on a computer for enabling access to a target application on a target resource in a distributed computer enterprise, comprising:

means for generating configuration directives each of which include a target type and information identifying a given logon process and any associated methods required to access a target application on a target resource;

means operative during a logon attempt for determining whether any of the configuration directives include a given target type; and

means responsive to the determining means for using information in a given configuration directive to access the target resource.

17. The computer program product as described in claim 16 wherein the configuration directives are stored in a database of the computer.

18. The computer program product as described in claim 16 wherein at least one configuration directive is generated from a user-specified logon preference.

19. The computer program product as described in claim 16 further including means operative during the logon attempt for coordinating given user information with the configuration directives.

20. The computer program product as described in claim 19 wherein the given user information is user-specific and application-specific information that enables a given user to access and logon to one or more target resources.

21. The computer program product as described in claim 20 wherein the given user information is stored in a globally-accessible database.