AUTHENTICATOR FOR USER STATE MANAGEMENT

摘要

Different types of soft-lockout policies can be associated with different organizations (or groups) in an identity management system. Each soft-lockout policy can indicate different parameters such as a number of login attempts allowed and an amount of time that a user account will be locked-out if the maximum allowed attempts are exceeded unsuccessfully. Users can be associated with the different organizations. For each user, the soft-lockout policies for the organization with which that user is associated are applied to that user when that user attempts to log in. Thus, different groups of users can be handled with different security behaviors regarding unsuccessful login attempts. If, for example, a user were to become moved from one organization to another, then the soft-lockout policies associated with the user's new organization would become applicable to that user.

主权项

1. A method comprising:
exposing, to a first client application, a first invocable method for performing a first type of operation relative to account state information stored in a repository; detecting a first invocation of the first invocable method by the first client application; determining, based on the first invocation, a first repository in which account state information pertaining to a first account is stored; determining, by the first invocable method, a first repository type of the first repository; and executing first code, contained within the first invocable method, that performs the first type of operation relative to the account state information pertaining to the first account stored in the first repository; wherein the first invocable method contains second code that performs the first type of operation relative to account state information stored in a repository of a second repository type that differs from the first repository type; and wherein the second code differs from the first code.