Communication between authentication plug-ins of a single-point authentication manager and client systems

摘要

Various arrangements for providing authentication information to a user are presented. A single-point authentication manager executed by a computer system may receive a request to access a resource from a remote client computer system. The single-point authentication manager may manage access to a plurality of resources including the resource. The single-point authentication manager may perform authentication using an authentication plug-in. In response to performing authentication of the user, the authentication plug-in may generate a parameter having a value that is a message to be transmitted to the remote client computer system. In response to receiving the parameter and the value from the authentication plug-in, the single-point authentication manager may transmit the value of the parameter to the application if the authentication is successful and to a credential collector if the authentication of the user failed.

主权项

1. A method for providing authentication information to a user, the method comprising:
receiving, by a single-point authentication manager executed by a first computer system, a request to access an application from a remote client computer system, the request to access the application being associated with a business entity, wherein: the application is executed by a second computer system; the single-point authentication manager manages access to a plurality of applications, the plurality of applications comprising the application; and the single-point authentication manager executes a first authentication plug-in that controls access to the application;
setting, by the single-point authentication manager, a configuration parameter based on determining whether the application or a credential collector is executed internal to or external to a domain of the single-point authentication manager; performing, by the single-point authentication manager, using the first authentication plug-in, authentication of the user; in response to performing authentication of the user, receiving, by the single-point authentication manager from the first authentication plug-in, a parameter and a value of the parameter, the value of the parameter being a message for presentation to the user of the remote client computer system, and the value of the parameter being customized by the first authentication plug-in for the business entity; and in response to receiving the parameter and the value of the parameter, transmitting, by the single-point authentication manager, for display to the user, a response, formatted based on the configuration parameter and including the value of the parameter, to the application if the authentication of the user succeeded and to the credential collector if the authentication of the user failed.