Patent ID: 11876793
Assignee: BANK OF AMERICA CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A system for managing multiple identity management systems across a plurality of distributed applications, the system comprising;
a plurality of distributed applications, each distributed application configured to support either (i) a first identity management system configured to control user access, or (ii) a second identity management system, each of the first and second identity management systems are configured to control user access to a corresponding one of the plurality of distributed applications;
one or more servers, each server comprising a web server instance configured to enable the first identity management system within one or more of the distributed applications and at least one virtual web server instance configured to enable the second identity management system within the one or more of the distributed applications;
a computing platform including a memory and at least one processing device in communication with the memory, wherein the memory stores instructions that are executable by the at least one processing device and configured to:
receive a request, originating from a first one of the plurality of distributed applications, to access a second one of the plurality of distributed,
in response to receiving the request, implement a first set of rules to analyze the request to determine whether the request includes an authentication token storing user authentication credentials, wherein the inclusion of the authentication token in the request indicates that the authentication token is used to propagate user authentication credentials from the first distributed application to the second distributed application, and
route the request to either (i) the web server instance enabling the first identity management system based on determination that the request does not include the authentication token, or (ii) one of the at least one virtual web server instances enabling the second identity management system based on determination that the request does include the authentication token, wherein the routing of the request to either (i) or (ii) provides for the request to be processed without requiring a user of the first and second distributed applications to re-enter login-credentials.