Identity provider discovery service using a publish-subscribe model
First Claim
1. A method for providing identity provider services in association with an identity provider instance discovery service, the method carried out using an apparatus that is distinct from and external to the identity provider instance discovery service, comprising:
- as requests for identity provider instances are processed by the identity provider instance discovery service, receiving and storing at the apparatus data identifying the identity provider instances assigned by the identity provider instance discovery service;
receiving at the apparatus an update concerning a resource associated with the identity provider instance discovery service, the update received at the apparatus from the identity provider instance discovery service via a topic-based publish-subscribe notification service supported on a hardware element;
based on the update received at the apparatus, modifying the data; and
upon receipt of a new request for an identity provider instance, and in lieu of forwarding the new request from the apparatus to the identity provider instance discovery service for handling, using the modified data to identify an identity provider instance for use in responding to the new request.
1 Assignment
0 Petitions
Accused Products
Abstract
A proxy is integrated within an F-SSO environment and interacts with an external identity provider (IdP) instance discovery service. The proxy proxies IdP instance requests to the discovery service and receives responses that include the IdP instance assignments. The proxy maintains a cache of the instance assignment(s). As new instance requests are received, the cached assignment data is used to provide appropriate responses in lieu of proxying these requests to the discovery service, thereby reducing the time needed to identify the required IdP instance. The proxy dynamically maintains and manages its cache by subscribing to updates from the discovery service. The updates identify IdP instance changes (such as servers being taken offline for maintenance, new services being added, etc.) occurring within the set of geographically-distributed instances that comprise the IdP service. The updates are provided via a publication-subscription model such that the proxy receives change notifications proactively.
-
Citations
7 Claims
-
1. A method for providing identity provider services in association with an identity provider instance discovery service, the method carried out using an apparatus that is distinct from and external to the identity provider instance discovery service, comprising:
-
as requests for identity provider instances are processed by the identity provider instance discovery service, receiving and storing at the apparatus data identifying the identity provider instances assigned by the identity provider instance discovery service; receiving at the apparatus an update concerning a resource associated with the identity provider instance discovery service, the update received at the apparatus from the identity provider instance discovery service via a topic-based publish-subscribe notification service supported on a hardware element; based on the update received at the apparatus, modifying the data; and upon receipt of a new request for an identity provider instance, and in lieu of forwarding the new request from the apparatus to the identity provider instance discovery service for handling, using the modified data to identify an identity provider instance for use in responding to the new request. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
Specification