Application integration

• US 8,925,052 B2
• Filed: 04/10/2007
• Issued: 12/30/2014
• Est. Priority Date: 07/26/2006
• Status: Active Grant

• Current Assignee: Bellsouth Intellectual Property Corporation (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Deagon, Arthur
• Primary Examiner(s): Pwu, Jeffrey
• Assistant Examiner(s): JHAVERI, JAYESH M
• Application Number:
  US11/733,310
• Publication Number:
  US 20080189777A1
• Time in Patent Office: 2,821 Days
• Field of Search: 726 4- 8, 726/27, 713/185, 709227-228
• US Class Current: 726/6
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations

Abstract

One embodiment of a method of integrating software applications includes customizing properties of an InfoVista application to accept a format of login strings provided by a SiteMinder application; modifying authentication information in properties of the InfoVista application to match authentication information that is to be sent from the SiteMinder application; and customizing the SiteMinder application to pass authentication information needed by the InfoVista application for login of a user into the InfoVista application using a single sign-on interface provided by the SiteMinder application. Other methods and systems are also provided.

Claims

1. A method comprising:

editing a properties file of a first application to accept a login string provided by a second application, wherein the first application collects and provides performance information on network devices and the second application manages authorization permissions, wherein the authorization permissions comprise a time constraint to prevent access to a resource outside of a specified period and an IP address restriction to prevent access to the resource by a specific IP address;

modifying first authentication information in the properties file of the first application to match second authentication information provided by the second application;

configuring the second application so that the second authentication information provided by the second application is accepted by the first application for login of a user into the first application using a single sign-on interface provided by the second application, wherein the login of the user into the first application only requires authentication through the second application using the second authentication information in the single sign-on interface and a process of logging into the first application is superseded by login of the user using the single sign-on interface provided by the second application;

determining whether the resource is protected by the second application; and

in response to determining that the resource is protected by the second application, authenticating the user to determine if access to the resource is allowed based on the authorization permissions.

2. The method of claim 1, wherein the second authentication information is passed to the first application from the second application via a header in a hypertext transfer protocol request.

3. The method of claim 1, further comprising prompting the user to manually configure parameters of the first application to support a current version of a hypertext transfer protocol server if the current version of the hypertext transfer protocol server is not supported by the first application.

12. The method of claim 1, further comprises:

querying a plurality of user stores; and

extracting relevant user data from the plurality of user stores, the relevant user data comprising the authorization permissions.

13. The method of claim 1, further comprising:

intercepting a request for the resource;

authenticating the user against a first user store; and

authorizing the request for the resource against a second user store.

14. The method of claim 1, wherein the resource comprises company web resources.

15. The method of claim 1, wherein the resource comprises at least one of:

java server page files, active server page files, or hypertext markup language files.

4. A non-transitory computer readable medium storing instructions that, when executed by a computer comprising a processor, cause the processor to perform operations comprising:

editing a properties file of a first application to accept a login string provided by a second application, wherein the first application collects and provides performance information on network devices and the second application manages authorization permissions, wherein the authorization permissions comprise a time constraint to prevent access to a resource outside of a specified time period and an IP address restriction to prevent access to the resource by a specific IP address;

modifying first authentication information in the properties file of the first application to match second authentication information provided by the second application;

configuring the second application so that the second authentication information provided by the second application is accepted by the first application for login of a user into the first application using a single sign-on interface provided by the second application, wherein the login of the user into the first application only requires authentication through the second application using the second authentication information in the single sign-on interface and a process of logging into the first application is superseded by login of the user using the single sign-on interface provide by the second application;

determining whether the resource is protected by the second application; and

in response to determining that the resource is protected by the second application, authenticating the user to determine if access to the resource is allowed based on the authorization permissions.

5. The non-transitory computer readable medium of claim 4, wherein the second authentication information is passed to the first application from the second application via a header in a hypertext transfer protocol request.

6. The non-transitory computer readable medium of claim 4, wherein the operations further comprise prompting the user to manually configure parameters of the first application to support a current version of a hypertext transfer protocol server if the current version of the hypertext transfer protocol server is not supported by the first application.

7. A system comprising:

a processor; and

a memory storing instructions, that when executed by the processor, cause the processor to perform operations comprising;

editing a properties file of a first application to accept a login string provided by a second application, wherein the first application collects and provides performance information on network devices and the second application manages authorization permissions, wherein the authorization permissions comprise a time constraint to prevent access to a resource outside of a specified period and an IP address restriction to prevent access to the resource by a specific IP address,

modifying first authentication information in the properties file of the first application to match second authentication information provided by the second application,

configuring the second application so that the second authentication information provided by the second application is accepted by the first application for login of a user into the first application using a single sign-on interface provided by the second application, wherein the login of the user into the first application only requires authentication through the second application using the second authentication information in the single sign-on interface and a process of logging into the first application is superseded by login of the user using the single sign-on interface provided by the second application,

determining whether the resource is protected by the second application, and

in response to determining that the resource is protected by the second application, authenticating the user to determine if access to the resource is allowed based on the authorization permissions.

8. The system of claim 7, wherein the second authentication information is passed to the first application from the second application via a header in a hypertext transfer protocol request, and wherein the system further comprises a server hosting the first application.

9. The system of claim 7, further comprising a hypertext transfer protocol server, wherein the operations further comprise prompting the user to manually configure parameter of the first application to support a current version of a hypertext transfer protocol server if the current version of the hypertext transfer protocol server is not supported by the first application.

10. The system of claim 7, wherein the second application comprises a suite of components designed to work together and capable of being installed on separate servers.

11. The system of claim 7, wherein the operations further comprise prompting the user to manually configure parameters of the first application to support a current version of a hypertext transfer protocol server.