AUTHENTICATOR FOR USER STATE MANAGEMENT

摘要

Different types of soft-lockout policies can be associated with different organizations (or groups) in an identity management system. Each soft-lockout policy can indicate different parameters such as a number of login attempts allowed and an amount of time that a user account will be locked-out if the maximum allowed attempts are exceeded unsuccessfully. Users can be associated with the different organizations. For each user, the soft-lockout policies for the organization with which that user is associated are applied to that user when that user attempts to log in. Thus, different groups of users can be handled with different security behaviors regarding unsuccessful login attempts. If, for example, a user were to become moved from one organization to another, then the soft-lockout policies associated with the user's new organization would become applicable to that user.

主权项

1. A method comprising:
detecting an invocation of an invocable method by a client application, wherein the invocable method is exposed for performing a type of operation relative to account state information stored in a repository; determining, based on the invocation, a repository in which account state information pertaining to an account is stored; determining, by the invocable method, based on metadata, a repository type of the repository, wherein the metadata maps the account to the repository and maps the repository to the repository type; and in response to determining, based on mappings within the metadata, that the account is maintained within the repository that is of the repository type, executing one or more instructions in the invocable method, wherein execution of the one or more instructions in the invocable method performs the type of operation relative to the account state information pertaining to the account stored in the repository.