Systems and methods for intercepting and automatically filling in forms by the appliance for single-sign on

摘要

The present invention is directed towards systems and methods for form-based single sign-on by a user desiring access to one or more protected resources, e.g., protected web pages, protected web-served applications, etc. In various embodiments, a single sign-on (SSO) module is in operation on an intermediary device, which is disposed in a network to manage internet traffic between a plurality of clients and a plurality of servers. The intermediary device can identify an authentication response from a server and forward the authentication response to the SSO module. The SSO module can complete a login form in the authentication response with a client's authentication data, return the completed login form to the server and forward cookies associated with the authentication response to the client. In various embodiments, multiple login forms can be completed, transparently to the client, by the SSO module on a client's behalf and reduce time expended by a client in obtaining access to protected resources.

主权项

1. A method for performing form-based authentication via a device intermediary to a client and a server, the method comprising:
(a) intercepting, by a device intermediary to a client and a server, a login form communicated from the server for authenticating a user of the client to the server, the server communicating the login form responsive to a request from the client to authenticate the user; (b) submitting, to the server by the device to authenticate the user, the login form with authentication credentials populated in the login form by the device; (c) receiving, by the device, a response from the server to submission of the login form that indicates the user is authenticated to the server; and (d) transmitting, by the device responsive to the indication that the user is authenticated to the server, the response from the server with a stored cookie to the client.