Patent ID: 11968303
Assignee: MICROSOFT TECHNOLOGY LICENSING, LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 13:
14. A method performed by an authentication service in a distributed computing system, the method comprising:
receiving an authentication request from a first computing service for a security token configured to authenticate the first computing service to a second computing service in the distributed computing system, the authentication request including an identity assertion token that was, prior to receiving the authentication request, issued by the authentication service to an application executed on a server, wherein the identity assertion token includes a digital data package that contains security credentials for an application identity under which the application is executed to provide the first computing service; and
in response to receiving the authentication request,
determining an identity of the application executed on the server based on the identity assertion token in the authentication request;
accessing an authorization policy record that corresponds to the identity and determining whether the identity is authorized for issuance of a security token based on the authorization policy record; and
in response to determining that the identity is authorized for a security token, transmitting, to the first computing service, the security token, wherein the security token is configured to authenticate the first computing service to the second computing service in the distributed computing system without using digital certificates.