Patent ID: 11930015
Assignee: PALANTIR TECHNOLOGIES INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC H

Claim 15:
16. A method for authenticating users of a data processing platform comprising:
receiving a first request from a first client device to establish a first access session to perform one or more first actions on first data of the data processing platform;
receiving, from a first identity provider of a first realm, a first authentication identifier corresponding to the first request and first permission data corresponding to the first authentication identifier;
receiving a second request from a second client device to establish a second access session to perform one or more second actions on second data of the data processing platform;
receiving, from a second identity provider of a second realm for a same user, a second authentication identifier corresponding to the second request and second permission data corresponding to the second authentication identifier, the second permission data being different from the first permission data;
assigning a unique user platform identifier to the first authentication identifier and the second authentication identifier for the same user;
generating merged permission data for the same user, comprising the first permission data and the second permission data; and
granting permission to perform the one or more first actions on the first data and the one or more second actions on the second data using the unique user platform identifier that maps to both the first authentication identifier and the second authentication identifier using a data mapping structure, the data mapping structure comprising the unique user platform identifier, the first authentication identifier, and the second authentication identifier, the permission being granted using the unique user platform identifier and the merged permission data, upon determining that the received user identity provider identifier corresponding to the request matches the first user identity provider identifier or the second user identity provider identifier mapped to the unique user platform identifier;
wherein the method is performed by one or more processors.