Patent ID: 11968201
Assignee: CISCO TECHNOLOGY, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 18:
19. A method of performing a single sign-on, comprising:
transmitting, on behalf of a first application executed on a client device, a first request to a first service provider via a network, the first request requesting first services from the first service provider;
intercepting, at a local agent, first traffic between the first application and an identity provider, the local agent acting as a proxy identity provider and having an internet protocol (IP) address of that of a subdomain of the domain of the identity provider;
performing an authentication process as to the identity provider;
receiving an identity provider cookie from the identity provider based on a validation of credentials during the authentication process;
storing, with the local agent, a copy of the identity provider cookie; transmitting, on behalf of a second application executed on the client device, a second request to a second service provider via the network, the second request requesting second services from the second service provider;
intercepting, at the local agent, second traffic between the second application and the identity provider;
adding the identity provider cookie to the second traffic; and
receiving validation to access the second service provider from the identity provider based on the identity provider cookie stored by the local agent, wherein transmitting the first request to the first service provider and intercepting, at the local agent, the first traffic between the first application and the identity provider includes:
defining, with the local agent and at the client device, a routing definition to cause the first traffic and the second traffic directed to the identity provider to be intercepted by the local agent;
intercepting, by the local agent, a first redirect message from the first service provider via the first application, the first redirect message including a uniform resource locator (URL) of the identity provider, the URL of the identity provider including a domain name of the identity provider; and
determining if the identity provider cookie is stored by the local agent.