Single Sign On Across Multiple Devices Using A Unique Machine Identification

摘要

Single sign on technology enables shared access to a protected service, such as an application, from a plurality of dynamically associated computing devices. After logging into the application from one of the computing device, a user may access the application from the other computing devices without re-authentication. A user may also log out from the application from any of the computing device. Unique machine identifications, such as device DNA, for identifying each of the computing devices are used in, for example, a method, apparatus (such as a login server) and computer program product. A single session may be shared across multiple computing devices. The same authentication token, such as a SAML token, may also be used for all of the computing devices having the same user session.

主权项

1. A method to access an application, the method comprising:
outputting, by a first computing device, a request to access the application by the first computing device; receiving, by the first computing device, a request for information used to determine a first machine identification associated with the first computing device and a user identification; outputting, by the first computing device, the information used to determine the first machine identification and the user identification; receiving, by the first computing device, an authentication token to access the application, wherein the authentication token is used by a second computing device to access the application; receiving, by the first computing device, a session identification to access the application, wherein the session identification identifies a session used by the second computing device to access the application; and accessing, by the first computing device, the application using the authentication token and session identification.