Patent ID: 11882120
Assignee: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC G  H

Claim 0:
1. A method to be executed by a processor of an identity intermediary, the method comprising:
receiving, by the identity intermediary, a request to access a first service of a plurality of services of a network from a principal, wherein the request comprises a service identifier of the first service;
storing, in a storage device of the identity intermediary, the service identifier of the first service;
sending, by the identity intermediary, an unsigned credential of the principal and a principal identifier to a credential provider;
receiving, from the credential provider, the principal identifier and the credential signed by the credential provider, wherein the signed credential indicates validation of the credential;
responsive to receiving the credential signed by the credential provider, looking up the principal identifier in the storage device to determine the service identifier of the first service; and
sending, by the identity intermediary, the signed credential to a service provider providing the first service for authentication.