Discovering and disambiguating identity providers

摘要

Systems, methods, and computer-readable storage media are provided for discovering and disambiguating identity providers such that user knowledge of appropriate identity providers is minimized. Users are presented with options for selecting appropriate providers only when multiple providers have user profiles matching a user identifier. When users are presented with options for selecting appropriate providers, providers that have user profiles matching the identifier are identified utilizing identity information for the application that utilizes the identity provider for its users rather than information identifying the identity provider itself. Where it is determined that no identity provider has a user profile associated with the user identifier (or where it is determined that a particular identity provider would generally be appropriate to be utilized with the user identifier), the opportunity for users to create an authentication account with one or more identity providers or to retry with a different user identifier is provided.

主权项

1. One or more computer-readable storage media storing computer-useable instructions that, when used by one or more computing devices, cause the one or more computing devices to:
receive a first user identifier; place one or more Application Programming Interface (API) calls to perform discovery on the first user identifier against a plurality of identity providers to determine whether any of the plurality of identity providers has an identity profile that matches the first user identifier; based at least on a determination that a single identity provider of the plurality has a user profile that matches the first user identifier, provide redirect instructions for authenticating against the single identity provider; based at least on a determination that multiple identity providers of the plurality have a user profile that matches the first user identifier, provide instructions for rendering a first disambiguation user interface; based at least on a determination that disambiguation is unable to be performed, provide instructions for rendering a second disambiguation user interface; and based at least on a determination that no identity provider of the plurality has a user profile that matches the first user identifier, provide instructions for rendering at least one of an account creation interface and an interface permitting input of a second user identifier.