SYSTEM AND METHOD FOR POOL-BASED IDENTITY AUTHENTICATION FOR SERVICE ACCESS WITHOUT USE OF STORED CREDENTIALS

摘要

A computer-implemented system and method for pool-based identity authentication for service access without use of stored credentials is disclosed. The method in an example embodiment includes providing provisioning information for storage in a provisioning repository; receiving a service request from a service consumer, the service request including requestor identifying information; generating an authentication request to send to an authentication authority, the authentication request including requestor identifying information; receiving validation of an authenticated service request from the authentication authority; and providing the requested service to the service consumer.

主权项

1. A method comprising:
receiving, from a service consumer, a request to access a service; determining a configuration of the service, the configuration of the service including previously configured levels of authentication restrictions for the service, the levels of authentication restrictions for the service including one of a first level authentication restrictions and a second level authentication restrictions; validating the service requested based on the previously configured levels of authentication restrictions fir the service, wherein validating the request to access a service having the second level authentication restrictions uses provisioning information; and providing the service consumer with access to the service requested.