Patent ID: 11968209
Assignee: OPEN TEXT HOLDINGS, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 7:
8. A system for hybrid authentication, the system comprising:
a processor;
a non-transitory computer readable medium; and
instructions stored on the non-transitory computer readable medium and translatable by the processor to provide a cloud-based authentication service in a cloud computing environment, wherein the cloud-based authentication service is adapted for:
responsive to receipt of credentials of a user from a browser application running on a user device, invoking an on-premises authentication service residing in an enterprise computing environment, wherein the on-premises authentication service authenticates the credentials of the user using an authentication scheme configured for an on-premises repository for which access is requested by the user;
once the credentials of the user are authenticated by the on-premises authentication service residing in the enterprise computing environment, receiving, from the on-premises authentication service, a user profile for the user;
generating an authentication code using the user profile for the user;
providing the authentication code to the browser application running on the user device; and
directing the browser application running on the user device to a cloud-based application residing in the cloud computing environment, wherein the browser application forwards the authentication code to the cloud-based application and invokes a Representational State Transfer (REST) application programming interface (API) for an on-premises application that manages the on-premises repository, wherein the cloud-based application obtains an access token from the cloud-based authentication service using the authentication code, invokes an on-premises REST API, and passes the access token to the on-premises authentication service residing in the enterprise computing environment, and wherein the on-premises authentication service verifies the access token and impersonates the user in accessing the on-premises repository through the on-premises application.