Patent ID: 11968303
Assignee: MICROSOFT TECHNOLOGY LICENSING, LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 8:
9. A computing device comprising:
at least one processor; and
memory storing instructions executable by the at least one processor, wherein the instructions, when executed, cause the computing device to;
receive data representing a request for an identity assertion token corresponding to an application executed on a server;
in response to the request for the identity assertion token,
determine an application identity under which the application is exec executed to provide a computing service;
access a first authorization policy record corresponding to the application identity;
determine that the application with the application identity is authorized in the identity assertion token based on the first authorization policy record; and
in response to the determination that the application with the application identity is authorized for the identity assertion token, transmit the identity assertion token to the server;

receive from the computing service, an authentication request for a security token configured to authenticate the computing service to another computing service, the authentication request including the identity assertion token, wherein the identity assertion token includes a digital data package that contains a security credential for the application identity;
in response to the authentication request, determine the application identity of the application based on the identity assertion token included in the authentication request; and
in response to determining, that the application identity is authorized for the security token based on a second authorization policy record corresponding to the application identity, transmitting the security token to the computing service.