Cookie Optimization

摘要

Disclosed herein is a system and method for optimizing a cookie or token in a web service or other claims based domain system. A user presents an identity token to the domain system which verifies the identity claim as authentic and then determines what accounts the user has access to on the domain. The user is issued an intermediate token by the system which includes the locations of the accounts the user has access to. The user then selects the account they wish to interact with and receives an account token back to the user for the specific account, including any of the privileges the user has on the account. The account token also includes information that the user has multiple accounts on the domain. The user is able to switch accounts on the domain system without having to revalidate their credentials to the domain system.

主权项

1. A system comprising:
a login scale unit configured to receive an identity token from a user and to determine a list of candidate accounts for the user on a given domain based on information contained in the identity token; and at least one management scale unit configured to determine if the user has access to each of the candidate accounts and the user's permission level on each of the candidate accounts, and to provide an account token back to the user.