METHOD AND APPARATUS FOR HANDLING USER IDENTITIES UNDER SINGLE SIGN-ON SERVICES

摘要

The invention provides a mechanism, in terms of means and method, for handling, provisioning and correlating a plurality of user's identities for a user in an automated manner between a single sign-On authentication provider and a number of service providers where the user accesses. Therefore, after a successful authentication of a user's authentication identity with the authentication provider, the authentication provider assigns an alias shared identity to the user, said alias shared identity being the uniquely exchanged identity between the authentication provider and the service provider to identify the user. The alias shared identity is linked at the authentication provider with the user's authentication identity and with an identifier of the service provider where the user accesses. The alias shared identity is linked at the service provider with the user's local identity which the user has for an account with the service provider.