Patent ID: 11962593
Assignee: nan
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method, comprising:
generating an access token that contains both alias identity attributes for an alias identity associated with a user and principal identity attributes for a principal identity that is also associated with the user, wherein the alias identity attributes include login credentials for the alias identity, and wherein the principal identity attributes include a principal identifier and login credentials for the principal identity; and
after authenticating the user on behalf of a first one of a plurality of secure applications based on the login credentials for the alias identity, in response to receiving a request to authenticate the user on behalf of a second one of the secure applications, and without authenticating the user based on the login credentials for the principal identity, transmitting the access token to an authorization endpoint in the second one of the secure applications to cause the authorization endpoint in the second one of the secure applications to grant, based on the principal identifier of the principal identity, a scope of access with regard to protected resources in the second one of the secure applications;
wherein the alias identity attributes further include an authorization scope of the alias identity; and
wherein the authorization endpoint in the second secure application determines the scope of access with regard to the protected resources in the second one of the secure applications by i) identifying, in the authorization endpoint in the second secure application, a plurality of authorization scopes associated with the principal identity, ii) prompting the user to select one of the plurality of authorization scopes associated with the principal identity, and iii) granting a scope of access to the protected resources in the second one of the secure application that is associated with an authorization scope associated with the principal identity that was selected by the user.