Single sign-on method in multi-application framework

摘要

A method and system for allowing a single-sign on to access independently purveyed applications with a highly secure single-sign methodology which permits wide area public access, such as through the Internet, to private access weaker credentialed sign-on applications without a need to upgrade the credential requirements for access to the applications.

主权项

1. A method for single sign-on to servers in a client-server network comprising:
receiving at a framework server a request from a browser via a load balancer, said load balancer decrypting said request and including digital sign-on credentials; sending an encrypted response from said framework server configured to generate a number of application Iframes and a connection between said framework server and said browser; receiving at a proxy server, a request from a URL within one or more of said Iframes via said load balancer; causing said proxy server in conjunction with said framework server to authenticate said credentials; determining, by said proxy server, the applications requested and confirming that said applications reside on applications servers; providing, by said proxy server, credentials required for sign-on to appropriate application servers; causing an indirect communicative connection between said browser and said appropriate application servers through said proxy server; and causing content from said appropriate applications servers to be supplied to said proxy server, wherein said content is further supplied to said browser.