Patent ID: 11968201
Assignee: CISCO TECHNOLOGY, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 15:
16. The client device of claim 15, wherein transmitting the first request to the first service provider and intercepting, at the local agent, the first traffic between the first application and the identity provider includes:
defining, at the client device, the routing definition including interception of the first traffic and the second traffic to the identity provider by the local agent;
receiving the first redirect message from the identity provider via the first service provider via and the first application;
determining if the identity provider cookie is stored by the local agent;
based at least in part on the local agent not storing the identity provider cookie, transmitting the first redirect message to the identity provider;
the operations further comprising:
determining if the first application is local to the client device;
based at least in part on the validation of the credentials during the authentication process, receiving the second redirect message from the identity provider via the first application, the second redirect message including the identity provider cookie;
storing, with the local agent, the copy of the identity provider cookie; and
transmitting the third redirect message to the first service provider;
receiving the second redirect message from the second service provider via the second application and the identity provider;
determining if the identity provider cookie is stored by the local agent;
based at least in part on the local agent storing the identity provider cookie, transmitting the fourth redirect message to the identity provider for validation via the second application, the fourth redirect message including instructions to install the identity provider cookie on the second application;
transmitting the fourth redirect message to the second service provider;
determining if the second application is local to the client device;
based at least in part on the second service provider validating the identity provider cookie:
receiving a service provider cookie from the service provider at the second application; and
receiving the second services from the second service provider at the second application based at least in part on the validation of the service provider cookie.