Authentication for distributed secure content management system

摘要

Aspects of the subject matter described herein relate to authentication for a distributed secure content management system. In aspects, a request to access a resource available through the Internet is routed to a security component. The security component is one of a plurality of security components distributed throughout the Internet and responsible for authenticating entities associated with an enterprise. The security component determines an authentication protocol to use with the entity and then authenticates the entity. If the entity is authenticated, the entity is allowed to use a forward proxy.

主权项

1. A method implemented at least in part by a computer, the method comprising:
receiving, at a security component, a message sent from a device, the security component being associated with a forward proxy that is logically between the device and a resource to which the device seeks access; authenticating, via the security component, an entity associated with the device; sending a cookie to the device, the cookie indicating that the entity has been previously authenticated by the security component, the device to present the cookie with subsequent requests for access to resources accessible via the forward proxy, the forward proxy providing connectivity of the device to the resource; establishing a time to live for the cookie, the cookie being no longer useful for authentication after the time to live has expired, wherein the cookie includes policy information associated with the entity usable to enforce a policy for the subsequent requests, the policy information comprising indication of sites the entity is allowed to access; and storing information identifying the entity.