INFORMATION PROCESSING SYSTEM, CONTROL METHOD FOR CONTROLLING THE INFORMATION PROCESSING SYSTEM, AND STORAGE MEDIUM

• US 20120297472A1
• Filed: 04/16/2012
• Published: 11/22/2012
• Est. Priority Date: 05/18/2011
• Status: Active Grant

• Current Assignee: Canon Ayutthaya Limited (Canon Inc.)
• Original Assignee: Canon Ayutthaya Limited (Canon Inc.)
• Inventors: Tamura, Yu
• Granted Patent: US 9,077,708 B2
• Time in Patent Office: Days
• US Class Current: 726/8
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations

Abstract

A second information processing system to communicate with a first information processing system includes an acquisition unit, an acceptance unit, a confirmation unit, and a setting unit. The acquisition unit acquires authentication information from the first information processing system and from a memory of the second information processing system. The acceptance unit accepts correspondence information indicating correspondence between first authentication information and second authentication information. The confirmation unit confirms, as a condition, whether the acquired authentication information in the first information processing system is identical to the accepted first authentication information and confirms, as a condition, whether the acquired authentication information in the second information processing system is identical to the accepted second authentication information. The setting unit does not set the correspondence information as single sign-on setting information if a condition is not satisfied and sets the correspondence information as single sign-on setting information if both conditions are satisfied.

Claims

1. A second information processing system capable of communicating with a first information processing system, the second information processing system comprising:

an acquisition unit configured to acquire authentication information in the first information processing system from the first information processing system and to acquire authentication information in the second information processing system from a memory of the second information processing system;

an acceptance unit configured to accept correspondence information indicating correspondence between first authentication information and second authentication information;

a confirmation unit configured to confirm, as a first condition, whether the acquired authentication information in the first information processing system is identical to the accepted first authentication information and to confirm, as a second condition, whether the acquired authentication information in the second information processing system is identical to the accepted second authentication information; and

a setting unit configured not to set the correspondence information as single sign-on setting information in response to the confirmation unit confirming that at least any one of the conditions is not satisfied, and to set the correspondence information as single sign-on setting information in response to the confirmation unit confirming that both the first condition and the second condition are satisfied.

2. A second information processing system capable of communicating with a first information processing system, the second information processing system comprising:

a reception unit configured to receive authentication information on a user, who operates a client, in the first information processing system and authentication information on the user in the second information processing system from the client;

an acquisition unit configured to acquire other authentication information in the first information processing system from the first information processing system based on the received authentication information in the first information processing system and to acquire other authentication information in the second information processing system from the second information processing system based on the received authentication information in the second information processing system, wherein the other authentication information in the first information processing system is associated with a same specific information as specific information associated with the authentication information, and wherein the other authentication information in the second information processing system is associated with the same specific information as specific information associated with the authentication information;

an acceptance unit configured to accept correspondence information from the user via the client, wherein the correspondence information indicates correspondence between first authentication information and second authentication information; and

a setting unit configured to set the correspondence information as single sign-on setting information in response to both the acquired other authentication information in the first information processing system being identical to the accepted first authentication information and the acquired other authentication information in the second information processing system being identical to the accepted second authentication information,

wherein, in response to a user authenticated in the first information processing system accessing the second information processing system via a client, the access is allowed without performing an authentication of the user, based on the single sign-on setting information that is set.

3. The second information processing system according to claim 2, wherein

the acquisition unit acquires a plurality of pieces of other authentication information in the first information processing system and a plurality of pieces of other authentication information in the second information processing system,

the acceptance unit accepts a single sign-on mapping table, which describes a plurality of pieces of correspondence information including the correspondence information, from a user who requests collective setting of single sign-on, and

the setting unit confirms, for each of correspondence information described in the single sign-on mapping table, whether one of the plurality of pieces of acquired other authentication information in the first information processing system is included and whether one of the plurality of pieces of acquired other authentication information in the second information processing system is included and, upon confirming that both of the pieces of other authentication information are included, sets confirmed correspondence information as single sign-on setting information.

4. The second information processing system according to claim 2,

wherein the authentication information in the first information processing system and the authentication information in the second information processing system, both of which are received by the reception unit, are authentication information for which administrator authority in the first information processing system and the second information processing system are set respectively, and

wherein the acquisition unit acquires other authentication information obtainable in a range of the administrator authority, from the first information processing system only in response to the received authentication information in the second information processing system being authentication information for which administrator authority is set.

5. The second information processing system according to claim 2,

wherein, in response to both the acceptance unit accepting new correspondence information and the accepted new correspondence information including authentication information already used in single sign-on setting information, the setting unit updates the correspondence information, which includes authentication information already used in the single sign-on setting information, to the new correspondence information.

6. The second information processing system according to claim 2,

wherein, in response to both the acceptance unit accepting new correspondence information and first authentication information in the new correspondence information not having corresponding second authentication information, the setting unit updates the correspondence information, which includes the first authentication information already used in the single sign-on setting information, so that the correspondence information is not used as single sign-on setting information.

7. The second information processing system according to claim 2, wherein the authentication information is a user ID and the specific information is tenant information indicating a tenant to which a user corresponding to the user ID belongs.

8. A control method for controlling a second information processing system capable of communicating with a first information processing system, the control method comprising:

acquiring authentication information in the first information processing system from the first information processing system and acquiring authentication information in the second information processing system from a memory of the second information processing system;

accepting correspondence information indicating correspondence between first authentication information and second authentication information;

confirming, as a first condition, whether the acquired authentication information in the first information processing system is identical to the accepted first authentication information and confirming, as a second condition, whether the acquired authentication information in the second information processing system is identical to the accepted second authentication information; and

not setting the correspondence information as single sign-on setting information in response to confirming that at least any one of the conditions is not satisfied, and setting the correspondence information as single sign-on setting information in response confirming that both the first condition and the second condition are satisfied.

9. A non-transitory computer-readable storage medium storing a program that causes a computer to execute the control method according to claim 8.

10. A second information processing system capable of communicating with a first information processing system and capable of performing single sign-on cooperation with the first information processing system, the second information processing system comprising:

an acquisition unit configured to acquire authentication information in the first information processing system and authentication information in the second information processing system;

an acceptance unit configured to accept correspondence information indicating correspondence between first authentication information and second authentication information;

a confirmation unit configured to confirm whether the acquired authentication information in the first information processing system includes the accepted first authentication information and whether the acquired authentication information in the second information processing system includes the accepted second authentication information; and

a setting unit configured not to set the correspondence information as single sign-on setting information in response to the confirmation unit confirming that at least any one of the accepted first authentication information and the accepted second authentication information is not included, and to set the correspondence information as single sign-on setting information in response to the confirmation unit confirming that both the accepted first authentication information and the accepted second authentication information are included.